secuRNOC Web Advisory Team

Cisco Unified Communications Manager Denial of Service Vulnerabilities
3 Mar 2010 at 10:00am
Cisco Unified Communications Manager (formerly Cisco CallManager) contains multiple denial of service (DoS) vulnerabilities that if exploited could cause an interruption of voice services. The Sess...
Cisco Digital Media Player Remote Display Unauthorized Content Injection Vuln...
3 Mar 2010 at 10:00am
A vulnerability exists in the Cisco Digital Media Player that could allow an unauthenticated attacker to inject video or data content into a remote display.
Multiple Vulnerabilities in Cisco Digital Media Manager
3 Mar 2010 at 10:00am
Multiple vulnerabilities exist in the Cisco Digital Media Manager (DMM). This security advisory outlines details.

Microsoft Security Advisory (981374): Vulnerability in Internet Explorer Coul...
10 Mar 2010 at 3:00am
Revision Note: V1.1 (March 10, 2010): Restated the mitigation concerning the e-mail vector. Added a new workaround for disabling the peer factory class in iepeers.dll. Advisory Summary:Microsoft is...
Microsoft Security Advisory (973811): Extended Protection for Authentication ...
9 Mar 2010 at 3:00am
Revision Note: V1.3 (March 9, 2010): Updated the FAQ to announce the rerelease of the update that enables Internet Information Services to opt in to Extended Protection for Authentication. For more...
Microsoft Security Advisory (981169): Vulnerability in VBScript Could Allow R...
1 Mar 2010 at 3:00am
Revision Note: V1.0 (March 1, 2010): Advisory published. Advisory Summary:Microsoft is investigating new public reports of a possible vulnerability in VBScript that is exposed on supported versions...

Infocon: green

Cert write up on Skype IMBot Logic and Functionality.
Cert write up on Skype IMBot Logic and Functionality., (Thu, Mar 11th)
11 Mar 2010 at 1:28pm
CERT.at has provided a good technical analysis of a Skype IMBot ...(more)...
One a day keeps the hackers away. Read our discussion of the top 25 coding er...
11 Mar 2010 at 10:53am
------ Johannes B. Ullrich, Ph ...(more)...

News: Change in Focus
10 Mar 2010 at 12:00am
Change in Focus
News: Twitter attacker had proper credentials
18 Dec 2009 at 12:00am
Twitter attacker had proper credentials
News: PhotoDNA scans images for child abuse
18 Dec 2009 at 12:00am
PhotoDNA scans images for child abuse

>> Advertisement <<
Can you answer the ERP quiz?
These 10 questions determine if your Enterprise RP rollout gets an A+.
http://www.findtechinfo.com/as/acs?pl=...

Vuln: Family Connections Multiple Input Validation Vulnerabilities
11 Mar 2010 at 12:00am
Family Connections Multiple Input Validation Vulnerabilities
Vuln: dpkg-source Directory Traversal Vulnerability
11 Mar 2010 at 12:00am
dpkg-source Directory Traversal Vulnerability
Vuln: NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability
11 Mar 2010 at 12:00am
NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability

Upgrade to IE 8 to avoid new zero day vulnerability
by lsseditor@watchguard.com - 10 Mar 2010 at 7:55pm
According to a Microsoft security advisory, IE 6 and 7 suffer from an invalid pointer reference vulnerability, which is a memory-related flaw that attackers can leverage to inject and execute code ...
Microsoft Black Tuesday: Microsoft Excel and Movie Maker Files Threaten Windo...
by lsseditor@watchguard.com - 9 Mar 2010 at 4:48pm
The Bulletin Summary for March highlights two important security bulletins, which fix code execution vulnerabilities in both Microsoft Excel (part of the Office package) and Microsoft Movie Maker.
Don't press F1 if a website tells you to.
by lsseditor@watchguard.com - 5 Mar 2010 at 8:16pm
Microsoft warned customers of a zero day vulnerability that affects Windows 2000, XP, and Server 2003. This flaw is exploited by enticing a user to press F1 after being lured to a malicious website.

Call Us at 1-800-544-4627, or send an email info@dcninc.com