Register | Forget Password | Login
Search :
SecurityReason

News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

WLB

WLB Database

Send to WLB

About WLB

RSS

News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

Corporate

Contact

About us

Services

SecurePHP

Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com

News from: Virus

» Topic:  Microsoft's OneCare flunks anti-virus test

» Added by:  John Leyden

» Date:  6.3.2007

  Microsoft's Live OneCare placed last in a test on the effectiveness of anti-virus security packages by Austrian researchers.

AV Comparatives put 17 security packages through their paces to see how well they recognised a battery of nearly half a million items of malware. Winner G Data Security's AntiVirusKit (AVK) identified all but 0.45 per cent of the sample against 17.6 per cent (86,600 of 497,600) that slipped past a fully updated version of OneCare.

F-Secure, Kaspersky Labs, Avira and AEC earned the Advanced+ rating in the tests alongside G Data. Symantec's Norton Anti-Virus detected 96.8 per cent of threats to earn an Advanced rating while McAfee's VirusScan posted 91.6 per cent detection, gaining it a rating as "standard". OneCare wasn't rated (does that mean its sub-standard? Ed).

AV Comparatives independent tests come weeks after a certification body declined to grant Microsoft's anti-virus product a seal of approval. Virus Bulletin, the independent security certification body, said that OneCare was among four anti-virus testing products that failed to reach the standard required for approval. McAfee's VirusScan anti-virus software also failed the tough VB100 certification process.

Source : http://www.theregister.co.uk/



Alert

*BSD libc (strfmon) Multiple vulnerabilities

high- 2008-03-25

Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected *BSD systems.

Apache rss

» Apache Tomcat <=
   6.0.18 UTF8 Directory
   Traversal Vulnerability

» Apache Tomcat information
   disclosure vulnerability

» Apache Tomcat XSS
   vulnerability

» Apache-SSL memory
   disclosure

PHP rss

» PHP 5.2.6 chdir(),ftok()
   (standard ext) safe_mode
   bypass

» PHP 5.2.6 posix_access()
   (posix ext) safe_mode
   bypass

» PHP 5.2.5 and prior :
   *printf() functions
   Integer Overflow

» PHP 5.2.5 cURL safe_mode
   bypass

Copyright © SecurityReason. All Rights Reserved.