Site Security Tools

[Tami]

Lepton\'s Crack 20031130
By: Lepton and Nekromancer
Relevant URL: [url=\"http://www.nestonline.com/lcrack/lcrack-20031130-beta.zip\"]http://www.nestonline.com/lcrack/lcrack-20031130-beta.zip[/url]
Platforms: Linux, MacOS, Os Independent, UNIX, Windows 2000, Windows NT, Windows XP
Summary:

Lepton\'s Crack is a generic password cracker. It is easily-customizable with a simple plugin system and allows system administrators to review the quality of the passwords being used on their systems. It can perform a dictionary-based (wordlist) attack as well as a brute force (incremental) password scan. It supports standard MD4 hash, standard MD5 hash, NT MD4/Unicode, Lotus Domino HTTP password (R4), and SHA-1 hash formats. LM (LAN Manager) plus appending and prepending

THC-Hydra v4.3
By: THC
Relevant URL: [url=\"http://www.thc.org/releases/hydra-4.3-src.tar.gz\"]http://www.thc.org/releases/hydra-4.3-src.tar.gz[/url]
Platforms: AIX, FreeBSD, HP-UX, IRIX, Linux, NetBSD, OpenBSD, Solaris, UNIX
Summary:

THC-Hydra - parallized login hacker is available: for Samba, FTP, POP3, IMAP, Telnet, HTTP Auth, LDAP, NNTP, MySQL, VNC, ICQ, Socks5, PCNFS, Cisco and more. Includes SSL support and is part of Nessus. Visit the project web site to download Win32, Palm and ARM binaries. Changes: important bugfix!

Call of Duty Remote Denial of Service Vulnerability
BugTraq ID: 11119
Remote: Yes
Date Published: Sep 06 2004
Relevant URL: [url=\"http://www.securityfocus.com/bid/11119\"]http://www.securityfocus.com/bid/11119[/url]
Summary:
It has been reported that it is possible for a remote attacker to immediately terminate instances of Call of Duty on target systems. This can be accomplished by sending a large (> 1024 bytes) query or response to the target.
Both the client and server are affected.

Cerulean Studios Trillian Client MSN Module Remote Buffer Ov...
BugTraq ID: 11142
Remote: Yes
Date Published: Sep 08 2004
Relevant URL: [url=\"http://www.securityfocus.com/bid/11142\"]http://www.securityfocus.com/bid/11142[/url]
Summary:
Trillian is reported prone to a remote buffer overflow vulnerability. This issue occurs due to insufficient boundary checks performed by the application and may allow an attacker to execute arbitrary code on a vulnerable computer. This could ultimately lead to an attacker gaining unauthorized access to the computer.

The vulnerability affects the MSN module and requires an attacker to pose as an MSN server through means such as a man-in-the-middle attack.

Trillian version 0.74i is reported prone to this issue, however, it is likely that other versions are affected as well.

FreezeX
By: Faronics Technologies USA Inc
Platforms: Windows 2000, Windows 95/98, Windows XP
Relevant URL: [url=\"http://www.faronics.com/html/Freezex.asp\"]http://www.faronics.com/html/Freezex.asp[/url]
Summary:

FreezeX prevents all unauthorized programs, including viruses, keyloggers and spy ware from executing. Powerful and secure, FreezeX ensures that any new executable, program, or application that is downloaded, introduced via removable media or the network will never install

Gearbox Software Halo Combat Evolved Game Server Remote Deni...
BugTraq ID: 11147
Remote: Yes
Date Published: Sep 09 2004
Relevant URL: [url=\"http://www.securityfocus.com/bid/11147\"]http://www.securityfocus.com/bid/11147[/url]
Summary:
The Halo Combat Evolved game server is reported prone to a remote denial of service vulnerability.

A remote attacker may exploit this vulnerability to deny service for legitimate game players.

Patches are available to address the issue.