BuyLow.com Computers And Internet - Internet Security, Computers, Mobile Devices, Networks

BuyLow.com | Resources | Contact Us


 

Microsoft Windows Does Not Disable AutoRun Properly

National Cyber Alert System
Technical Cyber Security Alert TA09-020A
Microsoft Windows Does Not Disable AutoRun Properly
Source: US-CERT
Systems Affected
Microsoft Windows
Overview
Disabling AutoRun on Microsoft Windows systems can help prevent the spread of malicious code. However, Microsoft’s guidelines for disabling AutoRun are not fully effective, which could be considered a vulnerability.
I. Description
Microsoft Windows includes an AutoRun feature, which can automatically [...]

Read More About - Microsoft Windows Does Not Disable AutoRun Properly »

Oracle National Cyber Alert System

Oracle Updates for Multiple Vulnerabilities
Original release date: January 15, 2009
Source: US-CERT
Overview
Oracle products and components are affected by multiple vulnerabilities. The impacts of these vulnerabilities include remote execution of arbitrary code, information disclosure, and denial of service.
I. Description
The Oracle Critical Patch Update – January 2009 addresses 41 vulnerabilities in different Oracle products and components. The document [...]

Read More About - Oracle National Cyber Alert System »

Microsoft Technical Cyber Security Alerts Multiple SMB Protocol Vulnerabilities

Original release date: January 13, 2009
Source: US-CERT
Systems Affected
Microsoft Windows 2000, XP, and Vista
Microsoft Windows Server 2000, 2003, and 2008
Overview
Microsoft has released updates that address vulnerabilities in Microsoft Windows and Windows Server.
I. Description
In their bulletin for January 2009, Microsoft released updates to address vulnerabilities in the Server Message Block (SMB) Protocol that affects all supported versions [...]

Read More About - Microsoft Technical Cyber Security Alerts Multiple SMB Protocol Vulnerabilities »

Microsoft Vista And Windows 7

Microsoft continues to have problems with their Vista opperating system. Consumers complain about the problems that plague the software. The next service package to help fix the problems continues to be delayed. No official release date has been set. Security and privacy issues should be of concern to anyone using a Microsoft based computer to [...]

Read More About - Microsoft Vista And Windows 7 »

The Safest Web Browser

The Safest Web Browser
According to Mozilla, maker of web browsers, their Firefox is the safest web browser.
Here is their claim:
Firefox keeps your personal info personal and your online interests away from the bad guys.
So How Do We Do It?
What makes Firefox different? Most importantly, we’re open. That means anyone around the world (and we have [...]

Read More About - The Safest Web Browser »

Google’s New Web Browser Let’s You Go Incognito

Web browsing has become safer with Chrome, Google.com ’s browser. You can download it for free. It’s lightweight on your computer resources but heavy duty on surfing the web… pages load faster.
There is also an awesome feature that is the antithesis of Microsoft’s Internet Explorer (IE) web browser — secure browsing. Whereas Microsoft tries to [...]

Read More About - Google’s New Web Browser Let’s You Go Incognito »

Recovering from a Trojan Horse or Virus

by the United States Computer Emergency Readiness Team
www.us-cert.gov
Michael D. Durkota and Will Dormann It can happen to anyone. Considering the vast number of viruses and Trojan horses traversing the Internet at any given moment, it’s amazing it doesn’t happen to everyone. Hindsight may dictate that you could have done a better job of protecting yourself, [...]

Read More About - Recovering from a Trojan Horse or Virus »

Is your company keeping information secure?

Federal Trade Commission
Are you taking steps to protect personal information? Safeguarding sensitive data in your files and on your computers is just plain good business. After all, if that information falls into the wrong hands, it can lead to fraud or identity theft. A sound data security plan is built on five key principles:
* Take [...]

Read More About - Is your company keeping information secure? »

Protect Your Computer From Microsoft

Microsoft
Microsoft Security
4 steps to protect your computer
Step 1. Keep your firewall turned on
What is a firewall?
A firewall helps protect your computer from hackers who might try to delete information, crash your computer, or even steal your passwords or credit card numbers. Make sure your firewall is always turned on.
• How to turn on your firewall
• [...]

Read More About - Protect Your Computer From Microsoft »

Online Verification: Who Can You Trust in the Virtual World?

How can you tell who you are communicating with over the Internet? This article from Business Week helps explain.
Kaylee was struggling. Diagnosed with a heart condition and cancer, she was scared. So she started a blog. Soon, people across the country answered her plea, writing notes of encouragement and even trying to mail [...]

Read More About - Online Verification: Who Can You Trust in the Virtual World? »

RSS BugTraq

  • [ MDVSA-2010:166 ] libgdiplus
    Posted by security on Aug 31 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:166 http://www.mandriva.com/security/ _______________________________________________________________________ Package : libgdiplus Date : August 31, 2010 Affected: 2009.0, 2009.1, 2010.0, 2010.1, Enterprise Server 5 […]
  • Tortoise SVN DLL Hijacking Vulnerability
    Posted by nikhil_uitrgpv on Aug 311. Overview Tortoise SVN is vulnerable to Windows DLL Hijacking Vulnerability. Version 1.6.10, Build 19898 (latest available on 30th August 2010 was tested) is vulnerable. 2. Vulnerability Description Tortoise SVN passes insufficiently qualified path for the dll "dwmapi.dll" while opening a file using TortoiseProc […]
  • [security bulletin] HPSBMA02571 SSRT100034 rev.1 - HP Insight Diagnostics Online Edition, Remote Cross Site Scripting (XSS)
    Posted by security-alert on Aug 31SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02492472 Version: 1 HPSBMA02571 SSRT100034 rev.1 - HP Insight Diagnostics Online Edition, Remote Cross Site Scripting (XSS) NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date: 2010-08-30 Last Updated: 2010-08-30 Pote […]
  • django in combination with mod wsgi on apache on default debian and ubuntu installations does not place any bounds on the maximum size of a file upload
    Posted by dave b on Aug 31Summary: In the default setup of wsgi, apache and django (at least on ubuntu and debian) by default there are no limits on the size of a file that an attacker can upload. http://cwe.mitre.org/top25/#CWE-770 and see example 2 at http://cwe.mitre.org/data/definitions/770.html Vendor response: " If you have your Apache install con […]
  • [USN-981-1] libwww-perl vulnerability
    Posted by Marc Deslauriers on Aug 31=========================================================== Ubuntu Security Notice USN-981-1 August 31, 2010 libwww-perl vulnerability CVE-2010-2253 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 9.04 Ubuntu 9.10 Ubu […]