Re: MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub

UPDATED: The BT Home Hub's serial number - which is the default admin password - can also be found on UPnP description XML files. Note that no password is required to access such files, as they're used for UPnP (authentication-less) operations. Note: UPnP is enabled by default on the BT Home Hub.

Re: function sleep() in all versions of PHP

Yeap. „Using PHP as an in-process script interpreter grants script authors control over the httpd children.” It is possible to make DoS (block all sockets/memory exe.). (more in Xploit magazin) Reason: Use PHP via a CGI interpreter with RLimit* directives. Anyone how use PHP as an

[SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA-1588-1[EMAIL PROTECTED] http://www.debian.org/security/ dann frazier May 27, 2008

Re: function sleep() in all versions of PHP

Mark, I agree with you that this is a known issue, and that there are ways around it, however I would in fact call it a vulnerability. The reasoning behind this is behind the definition of vulnerability, and here is a good one: a weakness in a system allowing unauthorized action [(NRC91:301;

Re: function sleep() in all versions of PHP

max_execution_time is *CPU EXECUTION* time and not *WALL-CLOCK* time -- reread the definition from the PHP man pages. Since you are doing sleep() in the script, which is suspending the process (script), no CPU time is accruing for that process (script), therefore you do not hit the

rPSA-2008-0177-1 emacs emacs-leim

rPath Security Advisory: 2008-0177-1 Published: 2008-05-27 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Non-deterministic Unauthorized Access Updated Versions: [EMAIL PROTECTED]:1/21.4a-5.4-1 [EMAIL PROTECTED]:1/21.4a-5.4-1 rPath Issue

[ GLSA 200805-21 ] Roundup: Permission bypass

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200805-21 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

Re: IOS Rookit: the sky isn't falling (yet)

Hi, On Tue, 27 May 2008 09:08:58 +0200 Nicolas FISCHBACH [EMAIL PROTECTED] wrote: Here's [8] a screenshot of CIR vs Topo. for those of you interested, here is the link to the full report (link may wrap):

iDefense Security Advisory 05.27.08: EMC AlphaStor Library Manager Arbitrary Command Execution Vulnerability

iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website found at the following link.

ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability

ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-033 May 27, 2008 -- Affected Vendors: Motorola -- Affected Products: Motorola RAZR -- Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary

iDefense Security Advisory 05.27.08: EMC AlphaStor Server Agent Multiple Stack Buffer Overflow Vulnerabilities

iDefense Security Advisory 05.27.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 27, 2008 I. BACKGROUND AlphaStor is a suite of applications used for disk management. For more information, please see the vendor's website at the following URL.