“…new tunneling support allows you to make a real VPN using OpenSSH without the need for any additional software. This goes well beyond the TCP port forwarding that we have supported for years – each end of a ssh connection that uses the new tunnel support gets a tun(4) interface which can pass packets between […]
One of the many things I found interesting was this quote: “…spyware has become one of the biggest threats that businesses now face.” Hmmm, I wonder how they are defining Spyware? I’ve seen malware, labeled as “Spyware”, that created a backdoor on a users system. I believe that malware is a more appropriate term, and […]
“It has been identified a vulnerability in the Cisco IOS Web Server. An attacker can inject arbitrary code in some of the dynamically generated web pages. To succesfully exploit the vulnerability the attacker only needs to know the IP of the Cisco. THERE’S NO NEED TO HAVE ACCESS TO THE WEB SERVER! Once the code […]
“Infocon has been raised to Yellow due to the exploit being publicly available, combined with the lack of a patch for this specific vulnerability. Disable Javascript in your Internet Explorer browsers, or switch to another browser.” We started Episode 3 of Security Weekly with some good ‘ole fashioned IE bashing. While we may joke about […]
“The Cisco 7920 Wireless IP Phone provides Voice Over IP service via IEEE 802.11b Wi-Fi networks and has a form-factor similar to a cordless phone. This product contains two vulnerabilities: The first vulnerability is an SNMP service with fixed community strings that allow remote users to read, write, and erase the configuration of an affected […]
Do you run SP2 on your XP machine? If not, you really should. And, if you run a network, you really need to test it with your applications as soon as possible. Back in April, only 24 percent of 136,000 machines in corporate America had been upgraded to SP2.
