SecuriTeam.comBeyond Security will help you expose your security holes and will show you what the bad guys already know about your hosts and network. Use our Automated Scanning service to perform a full security audit of your site, and find the latest security news and tools on Beyond Security's SecuriTeam web site.Lateral SQL Injection: a New Class of Vulnerability in Oracle- April 27, 2008 A new class of vulnerabilities have been discovered in Oracle, these vulnerabilities can be exploited through the use of Oracle's ability to allow users to manipluate the way certain internal functions work.http://www.securiteam.com/securityreviews/5QP0N20O0Y.html Intel Centrino 2200BG Wireless Driver Probe Overflow- April 21, 2008 A vulnerability in Intel Centrino 220BG Wireless driver allows remote attackers via a malformed beacon packet to cause the driver to overflow an internal buffer which in turn can be used to execute arbitrary code. The following exploit code can be used to test the vulnerability.http://www.securiteam.com/exploits/5FP0N0AO0M.html Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020)- April 9, 2008 The Windows DNS stub resolver is a Windows service used by Windows desktop software to resolve DNS names into IP addresses. The DNS stub resolver forwards DNS queries to the DNS server configured for the workstation (or server) and returns the DNS server s response to the requesting software.http://www.securiteam.com/securityreviews/5QP022KO1E.html ProxyStrike - Active Web Application Proxy- April 9, 2008http://www.securiteam.com/tools/5WP092KO0E.html SCO UnixWare pkgadd Local Root (Exploit)- April 6, 2008 A vulnerability in SCO UnixWare's pkgadd command line program allows local attackers to gain elevated privileges.http://www.securiteam.com/exploits/5ZP081PO0C.html |