Georgi's Place
News:• 20 September: We got a car :)• 4 October: Added Macbook 2.0GHz to My Gadgets • 4 October: Added Yamaha YPG-625 to My Gadgets • 9 February: Updated Spring 2006 Schedule • 23 January: Just added usage statistics for geodar.com's subdomains. • 19 January: Galia and Kostadin are getting married! Here are some images from the engagement. • 27 December: My PGP Key expires today. Click here for my new public key. • 24 December: Added iBoko G4 to My Gadgets • 22 December: I got an iBook :D • 10 December: Added Section My Code |
Blog:• Haloween• School is over, got a job. • Frying tomatoes • We got ourselves inline skates • Perl script for sending mail trough Gmail • Rice • Cast Iron skillet • Archival of video podcasts • New Category |
/.• Replacing Metal Detectors With Brain Scans• Windows Drops Below 90% Market Share • Teacher Sells Ads On Tests • Quantum Test Found For Mathematical Undecidability • Making BitTorrent Clients Prioritize By Geography? • European Police Plan to Remote-Search Hard Drives • Look What’s Cooking At Microsoft Labs • Too Good To Ignore — 6 Alternative Browsers • Twenty Years of Dijkstra’s Cruelty • Apple Quietly Recommends Antivirus Software For Macs • US Has Been In Recession Since December 2007 • Reading Guide To AI Design & Neural Networks? • 45nm Opteron Performance, Power Efficiency Tested • Study Confirms That Cars Have Personalities • New Massive Botnet Building On Windows Hole • Bush Demands Amnesty for Spying Telecoms |
NewsForge:• Browse all your source code revisions with ViewVC• Three graphical mount managers • Keeping an eye on your network with PasTmon • Keeping tabs on your network traffic • Managing your MP3s with Zina • Recent Firefox extensions for tab addicts • openDesktop.org provides super-portal to free software sites • Giving thanks for a long weekend • Gmail notifiers let you know "you've got mail" • Run your NFS server in the user address space with NFS-GANESHA • Fedora 10 proves infrastructure matter • Three applications for making disc labels • TiddlyWiki derivatives help you get things done • Upgrading to the newest Fedora release • Open source Untangle guard union's privacy • Debug your shell scripts with bashdb • DataForm adds efficient input to OpenOffice.org Calc • Ask Linux.com: NAS, Find, Squid, and EFS • The tanking economy and OSS • SimplyMEPIS: The best desktop Linux you haven't tried |
Bugtraq:• Vuln: libxml2 Recursive Entity Remote Denial of Service Vulnerability• Vuln: Andy's PHP Knowledgebase 'saa.php' Arbitrary File Upload Vulnerability • Vuln: Linux Kernel 'sendmsg()' Local Denial of Service Vulnerability • Vuln: OpenSSH CBC Mode Information Disclosure Vulnerability • Bugtraq: [ GLSA 200812-06 ] libxml2: Multiple vulnerabilities • Bugtraq: [ GLSA 200812-05 ] libsamplerate: User-assisted execution of arbitrary code • Bugtraq: [ GLSA 200812-04 ] lighttpd: Multiple vulnerabilities • Bugtraq: [ GLSA 200812-03 ] IPsec-Tools: racoon Denial of Service • More rss feeds from SecurityFocus |
|
PacketStormSecurity:• glsa-200812-07.txt - Gentoo Linux Security Advisory GLSA 200812-07 - Multiple vulnerabilities have been discovered in Mantis, the most severe of which leading to the remote execution of arbitrary code. Versions less than 1.1.4-r1 are affected.• glsa-200812-06.txt - Gentoo Linux Security Advisory GLSA 200812-06 - Multiple vulnerabilities in libxml2 might lead to execution of arbitrary code or Denial of Service. Versions less than 2.7.2-r1 are affected. • glsa-200812-05.txt - Gentoo Linux Security Advisory GLSA 200812-05 - A buffer overflow vulnerability in libsamplerate might lead to the execution of arbitrary code. Russell O'Connor reported a buffer overflow in src/src_sinc.c related to low conversion ratios. Versions less than 0.1.4 are affected. • glsa-200812-04.txt - Gentoo Linux Security Advisory GLSA 200812-04 - Multiple vulnerabilities in lighttpd may lead to information disclosure or a Denial of Service. Versions less than 1.4.20 are affected. • glsa-200812-03.txt - Gentoo Linux Security Advisory GLSA 200812-03 - IPsec-Tools' racoon is affected by a remote Denial of Service vulnerability. Versions less than 0.7.1 are affected. • glsa-200812-02.txt - Gentoo Linux Security Advisory GLSA 200812-02 - Two buffer overflows in enscript might lead to the execution of arbitrary code. Two stack-based buffer overflows in the read_special_escape() function in src/psgen.c have been reported. Ulf Harnhammar of Secunia Research discovered a vulnerability related to the setfilename command (CVE-2008-3863), and Kees Cook of Ubuntu discovered a vulnerability related to the font escape sequence (CVE-2008-4306). Versions less than 1.6.4-r4 are affected. • glsa-200812-01.txt - Gentoo Linux Security Advisory GLSA 200812-01 - A vulnerability in OptiPNG might result in user-assisted execution of arbitrary code. A buffer overflow in the BMP reader in OptiPNG has been reported. Versions less than 0.6.2 are affected. • USN-683-1.txt - Ubuntu Security Notice USN-683-1 - It was discovered that Imlib2 did not correctly handle certain malformed XPM images. If a user were tricked into opening a specially crafted image with an application that uses Imlib2, an attacker could cause a denial of service and possibly execute arbitrary code with the user's privileges. • dsa-1676-1.txt - Debian Security Advisory 1676-1 - Dmitry E. Oboukhov discovered that flamethrower creates predictable temporary filenames, which may lead to a local denial of service through a symlink attack. • pacpoll-disclose.txt - PacPoll version 4.0 suffers from a remote database disclosure vulnerability. • USN-682-1.txt - Ubuntu Security Notice USN-682-1 - It was discovered that libvorbis did not correctly handle certain malformed sound files. If a user were tricked into opening a specially crafted sound file with an application that uses libvorbis, an attacker could execute arbitrary code with the user's privileges. • USN-681-1.txt - Ubuntu Security Notice USN-681-1 - It was discovered that ImageMagick did not correctly handle certain malformed XCF images. If a user were tricked into opening a specially crafted image with an application that uses ImageMagick, an attacker could cause a denial of service and possibly execute arbitrary code with the user's privileges. • BMSA-2008-09.txt - Rumpus version 6.0 contains two buffer overflow vulnerabilities in its HTTP and FTP modules. Exploitation details provided. • webhub-bypass.txt - Web Hub CMS has a default administrator login/password pair left in the system. • infinite-bypass.txt - Infinite IT Solutions CMS has a default administrator login/password pair left in the system. ... |
|




