Hack In The Box :: Keeping Knowledge Free

HITBSecConf2010 - Dubai

Keynote 1: John Viega (CTO, SaaS, McAfee Inc.)

Keynote 2: Matt Watchinski (Senior Director of Vulnerability Research, Sourcefire Inc.)

Conference Speakers (alphabetical order):

1.) Arnauld Mascret (Sogeti / Cap Gemini)

2.) Christophe Devaux (Sogeti / Cap Gemini)

3.) Daniel Mende (ERNW GmbH)

4.) Dino Covotsos (Managing Director, Telspace Systems)

5.) Fredric Raynal (Head of Research, Sogeti/Cap Gemini)

6.) Gynvael Coldwind (Researcher, Hispasec)

7.) Laurent Oudot (Founder, TEHTRI-Security)

8.) Marc Schoenefeld (Independent Network Security Specialist)

9.) Oliver Roeschke (ERNW GmbH)

10.) Saumil Shah (Founder, Net-Square)

11.) Shawn Merdinger (Security Researcher)

12.) The Grugq (Anti Forensics Specialist)

There are very limited seats and registrants are encouraged to register early!

REGISTER NOW

Packet Storm Security Latest

· Botan-1.9.4.tgz
Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS #10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to most systems and compilers, and includes a substantial tutorial and API reference.
· gnupg-2.0.15.tar.bz2
GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.
· fwbuilder-4.0.0.tar.gz
Firewall Builder consists of a GUI and set of policy compilers for various firewall platforms. It helps users maintain a database of objects and allows policy editing using simple drag-and-drop operations. The GUI and policy compilers are completely independent, which provides for a consistent abstract model and the same GUI for different firewall platforms. It currently supports iptables, ipfilter, ipfw, OpenBSD pf, Cisco PIX and FWSM, and Cisco routers access lists.
· anantasoft-xsrf.txt
Anantasoft Gazelle CMS suffers from a cross site request forgery vulnerability.
· secunia-etsdisclose.txt
Secunia Research has discovered security issue in Employee Timeclock Software, which can be exploited by malicious, local users to disclose sensitive information. The security issue is caused due to the application passing the database password via the command line to the mysqldump utility, which potentially can be exploited to disclose the password via the process list. Version 0.99 is affected.
· secunia-etssql.txt
Secunia Research has discovered some vulnerabilities in Employee Timeclock Software, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the username and password parameters in auth.php and login_action.php is not properly sanitized before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Version 0.99 is affected.
· notepadpoc.zip
The MS HTML Help control activex is prone to a remote CHM help file hijack vulnerability when applications invoke help. Multiple built-in applications are vulnerable to this. The impact of the vulnerability is the loading of the incorrect CHM help file when it resides in the same directory the application invoking help starts in. This proof of concept exploit leverages Notepad to demonstrate the vulnerability.
· tarcpio-overflow.txt
GNU Tar and GNU Cpio suffer from a heap-based buffer overflow vulnerability. Tar versions prior to 1.23 and Cpio versions prior to 2.11 are affected.

Topics

· All topics
· AMD News (Feb 23, 2010)
· Apple News (Mar 08, 2010)
· Articles (Mar 03, 2009)
· Ask Us (Feb 01, 2003)
· Audio/Video (Mar 08, 2010)
· Encryption (Mar 10, 2010)
· Games (Mar 09, 2010)
· Hardware (Mar 04, 2010)
· HITB News (Feb 09, 2010)
· Industry News (Mar 10, 2010)
· Intel News (Mar 09, 2010)
· Law and Order (Mar 09, 2010)
· Linux (Feb 25, 2010)
· Microsoft (Mar 10, 2010)
· Networking (Mar 10, 2010)
· PDAs (Feb 09, 2007)
· Privacy (Mar 09, 2010)
· Red Hat (Mar 09, 2010)
· Science (Mar 10, 2010)
· Security (Mar 10, 2010)
· Software & Programming (Mar 10, 2010)
· Spam (Jan 26, 2010)
· Technology (Mar 05, 2010)
· Transmeta (Jul 07, 2007)
· Viruses & Malware (Mar 09, 2010)
· Wireless (Mar 03, 2010)