Critical vulnerability in the Linux kernel affects all versions since 2001

Friday, August 14th, 2009

Google security specialists Tavis Ormandy and Julien Tiennes report that a critical security vulnerability in the Linux kernel affects all versions of 2.4 and 2.6 since 2001, on all architectures. The vulnerability enables users with limited rights to get root rights on the system. The cause is a NULL pointer ...

VirtualBox 3.0.0 Released

Tuesday, June 30th, 2009

VirtualBox is a family of powerful x86 virtualization products for enterprise as well as home use. Not only is VirtualBox an extremely feature rich, high performance product for enterprise customers, it is also the only professional solution that is freely available as Open Source Software under the terms of the ...

Apache HTTP DoS Tool Released

Thursday, June 18th, 2009

Yesterday an interesting HTTP DoS tool has been released. The tool performs a Denial of Service attack on Apache (and some other, see below) servers by exhausting available connections. While there are a lot of DoS tools available today, this one is particularly interesting because it holds the connection open ...

Firefox 3.0.11 Released

Thursday, June 11th, 2009

Firefox 3.0.11 fixes several security issues found in Firefox 3.0.10: JavaScript chrome privilege escalation XUL scripts bypass content-policy checks Incorrect principal set for file: resources loaded via location bar Arbitrary code execution using event listeners attached to an element whose owner document is null Race condition while accessing the private data of a NPObject JS wrapper ...

Phrack Issue #66 – What You Were Waiting For

Thursday, June 11th, 2009

We have the great pleasure to release today another excellent selection of the best Hacking articles this year. An issue full of new exploitation techniques and ground work on writing attack software. This issue has some evil number.. with a lot of evil content. Phrack proves once more how we can, ...