OS X security update defuses PNG exploit

Grok Headline matches for OS X security update defuses PNG exploit

OS X security update defuses PNG exploit
(MacCentral)

OS X security update defuses PNG exploit
(MacCentral) 08/09/2004 08:13 PM
MacCentral - In addition to Mac OS X v10.3.5, Apple on Monday released Security Update 2004-08-09, which corrects a recently identified issue related to a library used to show PNG format graphics. The library is used on several computing platforms and by several applications, including Apple's own Safari Web browser. Apple provided only cursory information with this security update, but indicated that Security Update 2004-08-09 contains an updated libpng library.

WebSTAR security update fixes HFS+
exploit

WebSTAR security update fixes HFS+
exploit 12/19/2004 03:11 PM
4D Inc. has released an update to WebSTAR V to fix a security problem discovered with Macs whose hard drives have been formatted using the Macintosh Extended Hierarchical File System (HFS+) -- the standard volume format for Mac OS X. The update prevents the WebSTAR V Web server software from being used to retrieve hidden file contents from within Web site folders.

Hackers Exploit Windows Update Publicity

Hackers Exploit Windows Update Publicity 04/12/2005 01:49 AM

A new security exploit?

A new security exploit? 12/12/2003 08:08 AM

Don Park: "It's like discovering that everything you designed was built on a gigantic turtle that just woke up."

As Don recommends, I did a View Source. This is what the URL looks like. With a quick glance it looks like it's from Microsoft, but you're actually viewing a page at zapthedingbat.com. This isn't entirely new. I'm not sure what the %01 is about. I guess it's a problem if it's the action attribute of a form element, where you can't see the URL. Takeaway: look in the Address part of the browser window when you're typing into a form and if it's the wrong place, hit the Back button and resume your life.

"curly"

Sudo Exploit by Rosiello Security

Sudo Exploit by Rosiello Security 09/18/2004 12:59 PM
Angelo Rosiello (Sep 18 2004)

[SECURITY] [DSA 505-1] New cvs packages
fix remote exploit

[SECURITY] [DSA 505-1] New cvs packages
fix remote exploit 05/19/2004 01:33 PM
Martin Schulze (May 19 2004)

EU Defuses Tension with U.S. Over Middle
East

EU Defuses Tension with U.S. Over Middle
East 04/17/2004 12:46 PM
Reuters via Wired News Apr 17 2004 4:48PM GMT

Army defuses pipe bomb

Army defuses pipe bomb 05/19/2004 01:34 AM
The Army deals with a pipe bomb discovered in the driveway of a house at Drumaness in County Down.

From exposition to exploit: One security
book's story

From exposition to exploit: One security
book's story 06/02/2004 05:49 AM

Hashing exploit threatens digital
security

Hashing exploit threatens digital
security 06/17/2005 03:37 PM

[SECURITY] [DSA 400-1] New omega-rpg
packages fix local games exploit

[SECURITY] [DSA 400-1] New omega-rpg
packages fix local games exploit 11/11/2003 02:04 PM
Martin Schulze (Nov 11 2003)

[SECURITY] [DSA 408-1] New screen
packages fix group utmp exploit

[SECURITY] [DSA 408-1] New screen
packages fix group utmp exploit 01/05/2004 02:50 PM
Martin Schulze (Jan 05 2004)

[SECURITY] [DSA 456-1] New Linux 2.2.19
packages fix local root exploit (arm)

[SECURITY] [DSA 456-1] New Linux 2.2.19
packages fix local root exploit (arm) 03/08/2004 11:20 PM
Martin Schulze (Mar 05 2004)

[SECURITY] [DSA 495-1] New Linux 2.4.16
packages fix local root exploit (arm)

[SECURITY] [DSA 495-1] New Linux 2.4.16
packages fix local root exploit (arm) 04/26/2004 07:06 PM
Martin Schulze (Apr 26 2004)

[SECURITY] [DSA 693-1] New luxman
packages fix local root exploit

[SECURITY] [DSA 693-1] New luxman
packages fix local root exploit 03/14/2005 04:37 PM
Martin Schulze (Mar 14 2005)

Fiendish security exploit encrypts PC
user's data

Fiendish security exploit encrypts PC
user's data 06/05/2005 11:21 PM
Some enterprising crook just took computer crime to a whole new level, by figuring out how to invade someone else's computer, encrypt some of the victim's files, then holding the encryption keys for ransom. Evil, and brilliant....

[SECURITY] [DSA 430-1] New trr19
packages fix local games exploit

[SECURITY] [DSA 430-1] New trr19
packages fix local games exploit 01/28/2004 12:27 PM
Martin Schulze (Jan 28 2004)

[SECURITY] [DSA 401-1] New hylafax
packages fix remote root exploit

[SECURITY] [DSA 401-1] New hylafax
packages fix remote root exploit 11/17/2003 01:53 PM
Martin Schulze (Nov 17 2003)

[SECURITY] [DSA 413-1] New Linux 2.4.18
packages fix locate root exploit

[SECURITY] [DSA 413-1] New Linux 2.4.18
packages fix locate root exploit 01/06/2004 01:03 PM
Martin Schulze (Jan 06 2004)

[SECURITY] [DSA 491-1] New Linux 2.4.19
packages fix local root exploit (mips)

[SECURITY] [DSA 491-1] New Linux 2.4.19
packages fix local root exploit (mips) 04/17/2004 04:44 PM
Martin Schulze (Apr 17 2004)

[SECURITY] [DSA 405-1] New xsok packages
fix local group games exploit

[SECURITY] [DSA 405-1] New xsok packages
fix local group games exploit 12/30/2003 02:58 PM
Martin Schulze (Dec 30 2003)

[SECURITY] [DSA 480-1] New Linux 2.4.17
and 2.4.18 packages fix local root
exploit (hppa)

[SECURITY] [DSA 480-1] New Linux 2.4.17
and 2.4.18 packages fix local root
exploit (hppa) 04/14/2004 03:47 PM
Martin Schulze (Apr 14 2004)

[SECURITY] [DSA 514-1] New Linux 2.2.20
packages fix local root exploit (sparc)

[SECURITY] [DSA 514-1] New Linux 2.2.20
packages fix local root exploit (sparc) 06/04/2004 08:43 PM
Martin Schulze (Jun 04 2004)

[SECURITY] [DSA 479-2] New Linux 2.4.18
packages fix local root exploit (i386)

[SECURITY] [DSA 479-2] New Linux 2.4.18
packages fix local root exploit (i386) 04/15/2004 05:14 PM
Martin Schulze (Apr 14 2004)

[SECURITY] [DSA 417-2] New Linux 2.4.18
packages fix local root exploit (alpha)

[SECURITY] [DSA 417-2] New Linux 2.4.18
packages fix local root exploit (alpha) 01/09/2004 09:51 PM
Martin Schulze (Jan 09 2004)

[SECURITY] [DSA 427-1] New Linux 2.4.17
packages fix local root exploit
(mips+mipsel)

[SECURITY] [DSA 427-1] New Linux 2.4.17
packages fix local root exploit
(mips+mipsel) 01/19/2004 03:07 PM
Martin Schulze (Jan 18 2004)

[SECURITY] [DSA 417-1] New Linux 2.4.18
packages fix local root exploit
(powerpc+alpha)

[SECURITY] [DSA 417-1] New Linux 2.4.18
packages fix local root exploit
(powerpc+alpha) 01/07/2004 04:45 PM
Martin Schulze (Jan 07 2004)

[SECURITY] [DSA 441-1] New Linux 2.4.17
packages fix local root exploit
(mips+mipsel)

[SECURITY] [DSA 441-1] New Linux 2.4.17
packages fix local root exploit
(mips+mipsel) 02/18/2004 01:32 PM
Martin Schulze (Feb 18 2004)

Re: [Full-Disclosure] [SECURITY] [DSA
139-1] New super packages fix local root
exploit

Re: [Full-Disclosure] [SECURITY] [DSA
139-1] New super packages fix local root
exploit 06/22/2004 05:11 PM
gobbles_at_hushmail.com (Jun 21 2004)

[SECURITY] [DSA 489-1] New Linux 2.4.17
packages fix local root exploit
(mips+mipsel)

[SECURITY] [DSA 489-1] New Linux 2.4.17
packages fix local root exploit
(mips+mipsel) 04/17/2004 03:16 PM
Martin Schulze (Apr 17 2004)

[SECURITY] [DSA 438-1] New Linux 2.4.18
packages fix local root exploit
(alpha+i386+powerpc)

[SECURITY] [DSA 438-1] New Linux 2.4.18
packages fix local root exploit
(alpha+i386+powerpc) 02/18/2004 12:11 PM
Martin Schulze (Feb 18 2004)

[SECURITY] [DSA 482-1] New Linux 2.4.17
packages fix local root exploit
(source+powerpc/apus+s390)

[SECURITY] [DSA 482-1] New Linux 2.4.17
packages fix local root exploit
(source+powerpc/apus+s390) 04/14/2004 03:47 PM
Martin Schulze (Apr 14 2004)

[Exploit]: Microsoft FPSE fp30reg.dll
Overflow Remote Exploit (MS03-051)

[Exploit]: Microsoft FPSE fp30reg.dll
Overflow Remote Exploit (MS03-051) 11/15/2003 02:20 PM
Adik (Nov 14 2003)

[Exploit]: DameWare Mini Remote Control
Server Overflow Exploit

[Exploit]: DameWare Mini Remote Control
Server Overflow Exploit 12/19/2003 06:25 PM
Adik (Dec 19 2003)

Apples issues Security Update 2004-09-07
via Software Update

Apples issues Security Update 2004-09-07
via Software Update 09/08/2004 03:45 AM
Security Update 2004-09-07 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:

• CoreFoundation
• IPSec
• Kerberos
• libpcap
• lukemftpd
• NetworkConfig
• OpenLDAP
• OpenSSH
• PPPDialer
• rsync
• Safari
• tcpdump

For detailed information on this Update, please visit this website.

Microsoft Security Bulletin MS03-048:
Cumulative Security Update for Internet
Explorer (824145)

Microsoft Security Bulletin MS03-048:
Cumulative Security Update for Internet
Explorer (824145) 11/13/2003 12:36 AM
This is a cumulative update that includes the functionality of all the previously-released updates for Internet Explorer 5.01, Internet Explorer 5.5, and Internet Explorer 6.0. Additionally, it eliminates the following five newly-discovered vulnerabilities.

Microsoft Security Bulletin MS04-025:
Cumulative Security Update for Internet
Explorer (867801)

Microsoft Security Bulletin MS04-025:
Cumulative Security Update for Internet
Explorer (867801) 08/02/2004 01:10 AM
This update resolves several newly discovered public vulnerabilities. Each vulnerability is documented in this bulletin in its own Vulnerability Details section. If a user is logged on with administrative privileges, an attacker who successfully exploited the most severe of these vulnerabilities could take complete control of an affected system, including installing programs; viewing, changing, or deleting data; or creating new accounts with full privileges. Users whose accounts are configured to have fewer privileges on the system would be at less risk than users who operate with administrative privileges. Microsoft recommends that customers apply the update immediately.

Security Update: Macromedia ColdFusion
MX and JRun security updates

Security Update: Macromedia ColdFusion
MX and JRun security updates 09/24/2004 11:41 AM
Macromedia issued security bulletins and cumulative security patches for ColdFusion MX (Versions 6.0, 6.1, and 6.1 J2EE - JRun) and JRun server (Versions 3.0, 3.1, and 4.0).

"Microsoft Security Bulletin MS04-011:
Security Update for Microso..."

"Microsoft Security Bulletin MS04-011:
Security Update for Microso..." 04/16/2004 03:38 AM

Grok Description matches for OS X security update defuses PNG exploit
GrokA matches for OS X security update defuses PNG exploit

OS X security update defuses PNG exploit

The following phrases have been identified by the grok system as matching this entry: