[security] news da secunia

[filippo[at]linuxelba.org]

VIRUS ALERTS:

During the last week, Secunia issued two MEDIUM RISK virus alerts and
one HIGH RISK virus alert for three new Sasser worms. Please refer to
the grouped virus profiles below for more information:

SASSER.C - MEDIUM RISK Virus Alert - 2004-05-03 12:58 GMT+1
http://secunia.com/virus_information/9155/sasser.c/

SASSER.B - HIGH RISK Virus Alert - 2004-05-03 08:51 GMT+1
http://secunia.com/virus_information/9147/sasser.b/

Sasser.a - MEDIUM RISK Virus Alert - 2004-05-01 13:28 GMT+1
http://secunia.com/virus_information/9142/sasser.a/


[SA11553] PHP-Nuke Multiple Vulnerabilities

Critical:    Moderately critical
Where:       From remote
Impact:      Cross Site Scripting, Manipulation of data
Released:    2004-05-06

Janek Vind has reported some vulnerabilities in PHP-Nuke, allowing
malicious people to conduct Cross Site Scripting and SQL injection
attacks.

Full Advisory:
http://secunia.com/advisories/11553/


[SA11512] Red Hat update for xchat

Critical:    Moderately critical
Where:       From remote
Impact:      System access
Released:    2004-04-30

Red Hat has issued updated packages for xchat. These fix a
vulnerability, which potentially can be exploited by malicious people
to compromise a user's system.

Full Advisory:
http://secunia.com/advisories/11512/




[SA11546] Check Point VPN-1 Products ISAKMP Buffer Overflow
Vulnerability

Critical:    Highly critical
Where:       From remote
Impact:      System access
Released:    2004-05-05

A vulnerability has been discovered in various Check Point VPN-1
products, which can be exploited by malicious people to compromise a
vulnerable system.

Full Advisory:
http://secunia.com/advisories/11546/





-- 
www.linuxelba.org/filippo

gpg --keyserver keyserver.linux.it  --recv-key  A5CBF6A5