Presentazione Ufficiale

Various

NNLD is not a Linux Day

v2008.0

SABATO 29 NOVEMBRE 2008

presso:

Universita’ degli Studi di Milano - Sede di Crema
via Bramante 65 (di fronte al 104)
Crema (CR)

Verranno presentate alcune caratteristiche del sistema operativo Linux e del mondo Open Source. Interverranno i membri del LUG di Crema che porteranno le loro esperienze con il free software.

Programma della giornata:

9.30   presentazione del LUG
10.00  inizio
11.00  pausa caffè (15 min)
13.00  pausa pranzo
14.30  ripresa delle presentazioni
15.30  pausa caffè (15 min)
16.30  conclusione della giornata

Durante la giornata ci sarà un install fest in cui chi vuole potrà installare Linux sul proprio PC.

LUGANEGA
Linux User Group Crema
http://filibusta.crema.unimi.it

(click)

NNLD08 - DTI di Crema (Universita’ degli studi di Milano)

Various

Confermato il NNLD08, per sabato 29 novembre 2008, presso l’università di Crema. Ci sarà parallelamente anche un install fest.

Si invitano tutti gli interessati al talk a contattare pioniere@gmail.com per avere una lista degli interventi che verranno fatti (non vincolante e solo a scopo organizzativo). Grazie a tutti!

Installing / Testing Redhat Enterprise 5 in eeepc900!!

Various

For the moment an only screenpic of installation…

Mozilla Firefox 3 Multiple Vulnerabilities

Advisory

Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to bypass certain security restrictions, to disclose sensitive information, or to potentially compromise a user’s system.

1 ) An error in the JavaScript move and resize functionality can be exploited to trick the user into clicking an unintended button and e.g. download a malicious file.

2 ) Multiple errors can be exploited to pollute “XPCNativeWrappers” and run arbitrary script code with Chrome privileges.

3 ) Multiple errors in “XSLT” and “document.loadBindingDocument()” while creating documents can be exploited to run arbitrary script code with Chrome privileges.

4 ) Multiple errors in the layout and JavaScript engines can be exploited to corrupt memory.

5 ) Two errors in the image rendering implementation can be exploited to cause a crash.

6 ) An error in the graphics rendering engine can be exploited to cause a crash.

7 ) An error in the processing of BOM characters included in JavaScript code can be exploited to potentially bypass script filters and facilitate cross-site scripting attacks.

8  ) Multiple errors in the implementation of the “resource:” protocol can be exploited to perform directory traversal attacks and disclose sensitive information.

Successful exploitation of vulnerabilities #4-#6 may allow execution of arbitrary code.

The vulnerabilities are reported in versions prior to 3.0.2.

Solution:
Update to version 3.0.2.

Provided and/or discovered by:
The vendor credits:
1 ) Paul Nickerson
2 ) moz_bug_r_a4
3 ) Olli Pettay and moz_bug_r_a4
4 ) Jesse Ruderman, Igor Bukanov, Philip Taylor, Georgi Guninski, Antoine Labour, Jesse Ruderman, Bob Clary, and Martijn Warger
5 ) Drew Yao of Apple Product Security
6 ) David Maciejak
7 ) Dave Reed, Microsoft
8 ) Boris Zbarsky and Georgi Guninski

Original Advisory:
http://www.mozilla.org/security/announce/2008/mfsa2008-40.html
http://www.mozilla.org/security/announce/2008/mfsa2008-41.html
http://www.mozilla.org/security/announce/2008/mfsa2008-42.html
http://www.mozilla.org/security/announce/2008/mfsa2008-43.html
http://www.mozilla.org/security/announce/2008/mfsa2008-44.html

Microsoft Windows Vista Local Denial Of Service Vulnerability

Advisory

Microsoft Windows Vista is prone to a local denial-of-service vulnerability.

Attackers may exploit this issue to crash the affected operating system, denying further service to legitimate users.

This issue affects Windows Vista Home Premium and Ultimate editions; other versions may be affected as well.

for exploit click: /data/vulnerabilities/exploits/31570.cpp

Marchettaro!

Various

The cold arrives!

Various

cold.. cold and cold! And also the our beloved logo is covered by the leaf.. mmm! Hey one owl in the pics!! =)

ZoneAlarm Security Suite AntiVirus Directory Path Buffer Overflow Vulnerability

Advisory

ZoneAlarm Security Suite is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when performing virus scans on long directory paths.

Remote attackers may leverage this issue to execute arbitrary code with SYSTEM-level privileges and gain complete access to the vulnerable computer. Failed attacks will cause denial-of-service conditions.

This issue affects ZoneAlarm Security Suite 7.0.483.000; other versions may also be affected.

(click)

Google Chrome Browser 0.2.149.27 malicious link DoS Vulnerability

Advisory

Software:
Google Chrome Browser 0.2.149.27

Tested:
Windows XP Professional SP3

Result:
Google Chrome Crashes with All Tabs

Problem:
An issue exists in how chrome behaves with undefined-handlers in chrome.dll version
0.2.149.27. A crash can result without user interaction. When a user is made to visit
a malicious link, which has an undefined handler followed by a 'special' character,
the chrome crashes with a Google Chrome message window "Whoa! Google Chrome has crashed.
Restart now?". It lies in dealing with the POP EBP instruction when pointed out by the
EIP register at 0x01002FF4.

Proof of Concept:
http://evilfingers.com/advisory/google_chrome_poc.php

Credit:
Rishi Narang (psy.echo)
www.greyhat.in
www.evilfingers.com
---------------------------------------------------

PoC Working/Exploit:
Click for a demo <a href="EVIL:%">HERE</a>

Google Chrome 0.2.149.27 ‘SaveAs’ Function Buffer Overflow Vulnerability

Advisory

We (SVRT-Bkis) have just discovered vulnerability in Google Chrome
0.2.149.27. This is a Critical Buffer Overflow Vulnerability permiting
hacker to perform a remote attack and take complete control of the affected
system.

We have submitted this Vulnerability to Google. They confirmed and assign a
verifier for build 0.2.149.28.

Proof of Concept:

We tested Google Chrome 0.2.149.27 on Windows XP SP2 (Open Calculator)

http://security.bkis.vn/Proof-Of-Concept/PoC-XPSP2.html

With others Windows not XP SP 2:

http://security.bkis.vn/Proof-Of-Concept/PoC-Crash.html

Details:

· Type of Issue : Buffer Overflow.

· Affected Software : Google Chrome 0.2.149.27.

· Exploitation Environment : Google Chrome on Windows XP SP2.

· Impact: Remote code execution.

· Rating : Critical.

· Description :
The vulnerability is caused due to a boundary error when handling the
“SaveAs” function. On saving a malicious page with an overly long title
(<title> tag in HTML), the program causes a stack-based overflow and makes
it possible for attackers to execute arbitrary code on users’ systems.

· How an attacker could exploit the issue :
To exploit the Vulnerability, a hacker might construct a specially crafted
Web page, which contains malicious code. He then tricks users into visiting
his Website and convinces them to save this Page. Right after that, the code
would be executed, giving him the privilege to make use of the affected
system.

· Discoverer : Le Duc Anh - SVRT - Bkis

· About SVRT :
SVRT, which is short for Security Vulnerability Research Team, is one of
Bkis researching groups. SVRT specializes in the detection, alert and
announcement of security vulnerabilities in software, operating systems,
network protocols and embedded systems.

· About Bkis :
Bkis (Bach Khoa Internetwork Security) is Vietnamese leading Center in
researching, deploying network security software and solutions.

· Website : http://security.bkis.vn

· Mail : svrt[at]bkav.com.vn