The most striking technology application in this century is the impact of web on the human life. The current period has witnessed the increased use of web to a greater extent and the Web 2.0 has made the cyberspace as the global information space. Web 2.0 is a collection of technologies and services that allow increased user-creator interaction, content syndication, advancements in web-based user interfaces, which ultimately lead to the creation of an entirely new application platform.
Read the rest of this entry »

• 0 Comments

This paper will not cover basic SQL syntax or SQL Injection. It is assumed that the reader has a strong understanding of these topics already. This paper will focus on advanced techniques that can be used in an attack on a (web) application utilizing Microsoft SQL Server as a backend. These techniques demonstrate how an attacker could use a SQL Injection vulnerability to retrieve the database content from behind a firewall and penetrate the internal network. This paper is meant to educate security professionals of the potential devastating effects SQL Injection could have on an organization.
Read the rest of this entry »

• 0 Comments

A potential security vulnerability has been discovered in Oracle Internet Directory (OID). OID release 2.1.1.0.0 is vulnerable to a potential buffer overflow problem which may permit unauthorized access to the operating system. Products Oracle Internet Directory (OID) release 2.1.1.0.0 On Unix platforms 1. Change the ownership of executable “ oidldapd”from root user to the UNIX user who owns the OID installation in the operating system. 2. Set the file permissions on “ oidldapd”to 710. 3. Change the ownership of executable “ oidmon”from root user to the UNIX user who owns the OID installation in the operating system.
Read the rest of this entry »

• 0 Comments

The BlueBag Project Current Bluetooth worms pose relatively little danger compared to Internet scanning worms—but things might change soon. The authors’ BlueBag project shows targeted attacks through Bluetooth malware using proof-of-concept codes and devices that demonstrate their feasibility. In this article, we focus on the new risks created by the widespread presence of Bluetooth-enabled devices carrying both potentially sensitive data and vulnerability-prone software. In particular, we show how this mix of technologies could become a vehicle for propagating malware that’s specifically crafted to extract information from smart phones.
Read the rest of this entry »

• 0 Comments