Category Archives: Security

Security

Mandriva

[ MDVSA-2014:191 ] perl-XML-DT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory                         MDVSA-2014:191
 http://www.mandriva.com/en/support/security/
 _______________________________________________________________________

 Package : perl-XML-DT
 Date    : September 29, 2014
 Affected: Business Server 1.0
 _______________________________________________________________________

 Problem Description:

 Updated perl-XML-DT package fixes security vulnerability:
 
 The mkxmltype and mkdtskel scripts provided in perl-XML-DT allow
 local users to overwrite arbitrary files via a symlink attack on a
 /tmp/_xml_##### temporary file (CVE-2014-5260).
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5260
 http://advisories.mageia.org/MGASA-2014-0390.html
 _______________________________________________________________________

 Updated P
Security

FBI to Open Up Malware Investigator Portal to External Researchers

SEATTLE–The FBI has developed an internal malware-analysis tool, somewhat akin to the systems used by antimalware companies, and plans to open the system up to external security researchers, academics and others. The system is known as Malware Investigator and is designed to allow FBI agents and other authorized law enforcement users to upload suspicious files. […]