Insanity Reviews Friends

Researcher Uncovers (Another) Major Facebook Security Exploit

For all the credit Facebook has received for its privacy controls and user safety, the site still falls prey to an unsettling number of security issues and potential data breaches. Last month a botched code push accidentally revealed private user email addresses, and before that Facebook accidentally sent private messages to the wrong recipients. [...]

Tags: Data Breaches, Facebook, Fortunately, Information Photos, Invisible Frame, Malicious Data, Malicious Website, Platform One, Prey, Privacy Controls, Private User, Proof Of Concept, Real World, Researcher, Security Engineer, Security Hole, Security Issues, Trickery, Tyson, Vulnerability

more... »

USN-927-1: NSS vulnerability

Referenced CVEs: 

CVE-2009-3555

Description: 

===========================================================
Ubuntu Security Notice USN-927-1 April 09, 2010
nss vulnerability
CVE-2009-3555
===========================================================
A security issue affects the following Ubuntu [...]

Tags: 1 April, 1d, Attacker, Edubuntu, Man In The Middle Attack, Marsh, Nbsp, Nss, Protocols, Renegotiation, Security Issue, Security Notice, Sslv3, Tls, Usn, Vulnerability

more... »

USN-624-2: Erlang vulnerability

Referenced CVEs: 

CVE-2008-2371

Description: 

===========================================================
Ubuntu Security Notice USN-624-2 April 09, 2010
erlang vulnerability
CVE-2008-2371
===========================================================
A security issue affects the following Ubuntu [...]

Tags: April, Attacker, Denial Of Service, Edubuntu, Erlang, Nbsp, Pattern Options, Pcre Library, Security Issue, Security Notice, Usn, Vulnerability

more... »

USN-922-1: libnss-db vulnerability

Referenced CVEs: 

CVE-2010-0826

Description: 

===========================================================
Ubuntu Security Notice USN-922-1 March 31, 2010
libnss-db vulnerability
CVE-2010-0826
===========================================================
A security issue affects the following Ubuntu [...]

Tags: Arbitrary Files, Attacker, Database Environment, Edubuntu, Escalation, Nbsp, Privilege, Security Issue, Security Notice, Stephane, Usn, Vulnerability

more... »

USN-919-1: Emacs vulnerability

Referenced CVEs: 

CVE-2010-0825

Description: 

===========================================================
Ubuntu Security Notice USN-919-1 March 29, 2010
emacs22, emacs23 vulnerability
CVE-2010-0825
===========================================================
A security issue affects the following [...]

Tags: Attacker, Edubuntu, Emacs, Email, File Permissions, Group Mail, Group Writable, Mail Directory, Nbsp, Rosenberg, Security Issue, Security Notice, Usn, Vulnerability

more... »

USN-918-1: Samba vulnerability

Referenced CVEs: 

CVE-2010-0926

Description: 

===========================================================
Ubuntu Security Notice USN-918-1 March 24, 2010
samba vulnerability
CVE-2010-0926
===========================================================
A security issue affects the following Ubuntu [...]

Tags: Arbitrary Files, Attacker, Configuration File, Edubuntu, Global Section, Nbsp, Samba 3, Samba Configuration, Samba Security, Security Issue, Security Notice, Security Reasons, Smb Conf, Unix, Unix Extensions, Usn, Vulnerability

more... »

USN-912-1: Audio File Library vulnerability

Referenced CVEs: 

CVE-2008-5824

Description: 

===========================================================
Ubuntu Security Notice USN-912-1 March 16, 2010
audiofile vulnerability
CVE-2008-5824
===========================================================
A security issue affects the following Ubuntu [...]

Tags: Application Crash, Arbitrary Code, Attacker, Audio File Library, Audio Library, Automated System, Based Buffer Overflow, Compiler Options, Default Compiler, Denial Of Service, Edubuntu, Heap, Nbsp, Privileges, Security Issue, Security Notice, Usn, Vulnerability, Wav File

more... »

USN-909-1: dpkg vulnerability

Referenced CVEs: 

CVE-2010-0396

Description: 

===========================================================
Ubuntu Security Notice USN-909-1 March 11, 2010
dpkg vulnerability
CVE-2010-0396
===========================================================
A security issue affects the following Ubuntu [...]

Tags: Attacker, Automated System, Denial Of Service, Edubuntu, Grant Source, March 11, Nbsp, Security Issue, Security Notice, Source Package, Source Packages, Target, Usn, Vulnerability, William Grant

more... »

USN-906-1: CUPS vulnerabilities

Referenced CVEs: 

CVE-2009-3553, CVE-2010-0302, CVE-2010-0393

Description: 

===========================================================
Ubuntu Security Notice USN-906-1 March 03, 2010
cups, cupsys vulnerabilities
CVE-2009-3553, CVE-2010-0302, CVE-2010-0393
===========================================================
A security [...]

Tags: Arbitrary Files, Attacker, Compiler Options, Default Compiler, Denial Of Service, Edubuntu, Environment Variable, Escalation, Format String, Message Strings, Nbsp, Network Operations, Root Privilege, Scheduler, Security Issue, Security Notice, Server Crash, Tool, Usn, Vulnerability

more... »

USN-904-1: Squid vulnerability

Referenced CVEs: 

CVE-2010-0639

Description: 

===========================================================
Ubuntu Security Notice USN-904-1 February 24, 2010
squid vulnerability
CVE-2010-0639
===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 8.04 LTS
Ubuntu [...]

Tags: Attacker, Crash, Denial Of Service, Edubuntu, Htcp, Nbsp, Security Issue, Security Notice, Squid, Usn, Vulnerability

more... »