How To Upgrade Ubuntu 9.10 (Karmic Koala) To 10.04 (Lucid Lynx)
(Desktop & Server)

Yesterday the new Ubuntu 10.04 (Lucid Lynx) was released. This guide
shows how you can upgrade your Ubuntu 9.10 desktop and server
installations to Ubuntu 10.04.

continue reading.....

The Ubuntu team is pleased to announce Ubuntu 10.04 LTS (Long-Term Support). This release incorporates the Desktop edition and the Server edition. The Server edition can be used on physical servers, on Ubuntu Enterprise Cloud (UEC), and on Amazon’s EC2 public cloud. Code-named ‘Lucid Lynx’, 10.04 LTS continues Ubuntu’s proud tradition of integrating the latest and greatest open source technologies into a high-quality, easy-to-use Linux distribution. Ubuntu 10.04 Screenshot Tour

continue reading.....

Microsoft recently announced it has withdrawn its MS10-025 security update when they found the update didn’t adequately address the underlying issue it was intended to fix.

The update and subsequent withdrawal affects only Windows 2000 servers that have the optional Windows Media Service installed.

A re-release of the patch is due sometime in the next week. Pending the re-release, F-Secure has withdrawn the signature for this vulnerability from our Vulnerability database.

In the meantime, mitigation and workaround strategies listed in the MS10-025 bulletin are still considered effective.

—————

Updated to add: The MS10-025 Security Update has been re-released (April 28th). Windows 2000 Server users with the non-default Windows Media Services installed are advised to install the latest update.

On 23/04/10 At 05:15 AM

continue reading.....

Note: due to a technical issue, this post has been republished.

On 29/04/10 At 03:54 PM

continue reading.....

Microsoft published KB article #983438 late yesterday, with details about a XSS vulnerability within …(more)…

continue reading.....

Disk pooling is the hottest new function to Amahi. Disk Pooling uses Samba to create a storage pool of all your available hard drives. It also allows you to create redundant copies (from 2 to whatever the max-number of disks you have in the pool) of the files you store. This can help prevent data loss if part of your hardware fails. Click on the external link to view a video on Storage Pooling.

continue reading.....

When facing off against a WebDAV enabled server, there are two things to find out quickly: can you upload files, and if so, can you execute code?
DAVTest attempts help answer those questions, as well as enable the pentester to quickly gain access to t…

continue reading.....

SCO Group wants a judge to overrule a jury that found it doesn’t own Unix. Or it wants a fresh trial. Either, really, as long as SCO gets the result it wants. The company’s filed papers with a US court saying the jury hearing its case over whether SCO owned the Unix copyright, and that found for Novell last month, was either too stupid, too confused or too distracted to grasp the compelling power of its evidence.

continue reading.....

opentaps 1.4 was officially released in March 2010. This release features many new features in CRM, manufacturing, supply chain management, and financial accounting; improved user interface thanks to the Google Web Toolkit; hibernate keyword search; VOIP integration with Asterisk; improved Web security; the opentaps Domain Driven Architecture with Spring framework and hibernate; and upgraded versions of the Apache Tomcat and OFBiz

continue reading.....

Azat Harutyunyan has discovered a vulnerability in suncat.csun.edu, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

ZDNet Blog: Serious XSS flaw haunts Microsoft SharePoint

continue reading.....

HotelChatter: Annual Hotel Wi-Fi Report 2010

continue reading.....

Infam0us has discovered a vulnerability in ucjeps.berkeley.edu, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

The Blender API provides us with the means to define IPOs from scratch, enabling the definition of movements not easily re-created by setting key frames by hand. Thus there is more to IPOs than just driving one IPO by another one. Furthermore, Shape keys and poses are examples of (collections of) IPOs that are quite different from, for example, a location IPO. We will encounter both shape keys and poses later on in this article, but we will start off with looking at how we might define an IPO from scratch.

continue reading.....

continue reading.....

continue reading.....

l3d has discovered a vulnerability in dsl.vodafone.de, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

Batch has discovered a vulnerability in www.wcpfc.int, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

Batch has discovered a vulnerability in www.dsto.defence.gov.au, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

Batch has discovered a vulnerability in trove.nla.gov.au, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

Batch has discovered a vulnerability in www.gbcma.vic.gov.au, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

Rivijx7k0s has discovered a vulnerability in www.shockwave.com, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

TrainReq has discovered a vulnerability in api.addthis.com, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

DKiller92 has discovered a vulnerability in www.international.rai.it, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

www.intelcomms.net has discovered a vulnerability in www.athensattica.gr, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

Hadi Kiamarsi has discovered a vulnerability in www.pgp.com, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

continue reading.....

Xylitol has discovered a vulnerability in www.albanyindustries.com, which could be exploited by malicious people to conduct XSS attacks.

continue reading.....

Nagios can perform multiple checks using one connection on a Windows server using the CheckMultiple function and the NSClient++. This feature which acts much like check_multi allows you to save network and system resources with one check. The Nagios server then brings the “bad news” to the top by showing any checks that have Critical state in the web interface.

continue reading.....

Re: STP mitm attack idea

continue reading.....