W32/Rbot-EK - A bot that exploits older viruses, Windows vulnerabilities, SQL Servers with weak passwords and network shares to spread between machines. Zindos-A uses the backdoor opened by MyDoom to infect systems. W32/Zindos-A - This is the other foot of MyDoom.O (or MyDoom.M, depending on what vendor is doing the reporting). Mandrake Linux patch available for XFree86Īccording to an alert from Mandrake Linux, 'Steve Rumble discovered XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.' For more, go to:Īnti-virus software companies are warning e-mail users about a new version of the MyDoom e-mail worm, dubbed MyDoom.O, which is spreading on the Internet and causing slowdowns at search engines, including those run by Lycos and Google. For more, go to:Ī vulnerability in Webmin could allow an attacker to bypass the system's access control list 'and gain read access to configuration information for a module.' For more, go to: For more, go to:Ī flaw in postgresql's ODBC implementation could be exploited to crash the application accessing the database. For more, go to:Ī code review for mod_ssl found another 'risky' call to the ssl_log file. This flaw could be exploited prior to a user being authenticated and could allow an attacker to take control of the affected machine. This has been fixed:Ī buffer overflow has been found in SWAT, the Samba Web Administration Tool. A flaw in the HP DCE implementation could be exploited by a remote user to run commands on the affected server with root privileges, according to a warning from For more, including links to all the appropriate patches, go to:Ī bug in Opera could allow an attacker to spoof a Web site using frame injection.

Vpn checkpoint linux