This essay takes a look at a selection of network anonymity systems including VPNs, Tor, Freenet and I2P. The different systems are explained and then compared and contrasted with each other. A number of issues are considered for each system including ease of use, popularity, strength of anonymity provided, and potential attacks on the system.
Monthly Archives: January 2017
DSA-3771 firefox-esr – security update
Multiple security issues have been found in the Mozilla Firefox web
browser: Memory safety errors, use-after-frees and other implementation
errors may lead to the execution of arbitrary code, information
disclosure or privilege escalation.
Apple Security Advisory 2017-01-23-7
Apple Security Advisory 2017-01-23-7 – iTunes for Windows 12.5.5 is now available and addresses code execution vulnerabilities.
Vuln: Cisco IOS Software CVE-2016-6473 Denial of Service Vulnerability
Cisco IOS Software CVE-2016-6473 Denial of Service Vulnerability
Vuln: PHP 'ext/pcre/php_pcre.c' Information Disclosure Vulnerability
PHP ‘ext/pcre/php_pcre.c’ Information Disclosure Vulnerability
GLSA 201701-64: X.Org X Server: Multiple vulnerabilities
GLSA 201701-65: Oracle JRE/JDK: Multiple vulnerabilities
Ubuntu Security Notice USN-3178-1
Ubuntu Security Notice 3178-1 – It was discovered that icoutils incorrectly handled memory when processing certain files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause icoutils to crash, resulting in a denial of service, or possibly execute arbitrary code.
Cisco Security Advisory 20170124-webex
Cisco Security Advisory – A vulnerability in the Cisco WebEx browser extensions provided by Cisco WebEx Meetings Server and Cisco WebEx Meetings Center could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. The vulnerability is due to the use of a crafted pattern by the affected software. An attacker could exploit this vulnerability by directing a user to a web page that contains the crafted pattern and starting a WebEx session. The WebEx session could allow the attacker to execute arbitrary code on the affected system, which could be used to conduct further attacks. Cisco has begun to release software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Bugtraq: [ERPSCAN-17-005] Oracle PeopleSoft – XSS vulnerability CVE-2017-3300
[ERPSCAN-17-005] Oracle PeopleSoft – XSS vulnerability CVE-2017-3300