Random Musings - Day #358

Christmas Eve! It really annoyed me that the trains on Christmas finish early. Which cause a problem getting home for Christmas.

Anyhow many many links. Here's a few...

• IIS 6 Attack Could Let Hackers Snoop on Servers


• IIS 6.0 Webdav Unicode Vulnerability


• MSIE 0-day Spreading Via SQL Injection


• SQL Truncation Exploits


• Encrypting Connections to SQL Server


• secret questions analysis


• Attacks prompt Microsoft to fix Excel flaw


• pcAnywhere Allows Local Users to Become SYSTEM


• CVE-2005-1970 (Symantec pcAnywhere 10.5x and 11.x before 11.5 Caller Properties vulnerability)


• Cisco benchmark


• Catalyst Switched Port Analyzer (SPAN) Configuration Example


• Multiple Vulnerabilities in Cisco Wireless LAN Controllers


• Cisco Event Response: Semiannual Cisco IOS Software Advisory Bundled Publication

Privilege Escalation on all Windows

Whilst looking for potential privilege escalation vulnerability, I found this gem regarding to kernel exploitation:
Windows VDM Zero Page Race Condition Privilege Escalation (MS07-022; BID=23367; CVE-2007-1206)

Java and flash patches

I'm falling behind guys because my social life gets in the way. I'll try my best to throw lil tidbits from now on in and show what is in my empty head of mine...

Interesting how vulnerabilities and patches were released for both Java and Flash on Friday the 13th. I'm still not superstitious!

Have a look at: The Register's take on those two patches.