<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Security Hero &#187; Virus</title>
	<atom:link href="http://sechero.com/category/virus/feed/" rel="self" type="application/rss+xml" />
	<link>http://sechero.com</link>
	<description>If it's about security, you heard it here first</description>
	<lastBuildDate>Mon, 12 Jul 2010 23:27:38 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
		<item>
		<title>4110</title>
		<link>http://sechero.com/4110/</link>
		<comments>http://sechero.com/4110/#comments</comments>
		<pubDate>Wed, 27 May 2009 20:59:40 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Botnet]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[AdWare]]></category>
		<category><![CDATA[Downloader]]></category>
		<category><![CDATA[Fake]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Proxy]]></category>
		<category><![CDATA[Trojan]]></category>
		<category><![CDATA[Win32]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[4110 BAT/TrojanDownloader.Ftp.NDM, BAT/TrojanDownloader.Ftp.NDN, IRC/SdBot (2), PDF/Exploit.Pidief.ONF, Win32/Adware.AntiVirus1, Win32/Adware.Antivirus2008, Win32/Adware.AntivirusPlus (2), Win32/Adware.BHO.NCX, Win32/Adware.MySideSearch, Win32/Adware.NaviPromo (2), Win32/Adware.PersonalAntivirus (2), Win32/Adware.PrivacyComponents, Win32/Adware.UltraAntivirus2009 (3), Win32/Adware.Virtumonde (2), Win32/Adware.WinPCDefender, Win32/Agent.DKR (2), Win32/Agent.PGA, Win32/Agent.PKT, Win32/Agent.PMI (3), Win32/AntiAVNAK (2), Win32/Autoit.FV (2), Win32/AutoRun.FlyStudio.KC, Win32/AutoRun.IRCBot.AK, Win32/AutoRun.KS, Win32/AutoRun.VB.CX (2), Win32/AutoRun.VB.DP (2), Win32/Bagle.RD, Win32/BHO.NOR, Win32/Delf.ODU, Win32/Delf.OJB, Win32/Dialer.NAD, Win32/Hupigon.NOU, Win32/KillAV.NDT (4), Win32/KillProc.NAF, Win32/Kryptik.QR, Win32/Kryptik.QS, Win32/Mebroot.BL, Win32/Mebroot.BM (2), Win32/Mebroot.BN (2), [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6079&amp;Itemid=26">4110</a></h1>
</p>
<p>BAT/TrojanDownloader.Ftp.NDM, BAT/TrojanDownloader.Ftp.NDN, IRC/SdBot (2), PDF/Exploit.Pidief.ONF, Win32/Adware.AntiVirus1, Win32/Adware.Antivirus2008, Win32/Adware.AntivirusPlus (2), Win32/Adware.BHO.NCX, Win32/Adware.MySideSearch, Win32/Adware.NaviPromo (2), Win32/Adware.PersonalAntivirus (2), Win32/Adware.PrivacyComponents, Win32/Adware.UltraAntivirus2009 (3), Win32/Adware.Virtumonde (2), Win32/Adware.WinPCDefender, Win32/Agent.DKR (2), Win32/Agent.PGA, Win32/Agent.PKT, Win32/Agent.PMI (3), Win32/AntiAVNAK (2), Win32/Autoit.FV (2), Win32/AutoRun.FlyStudio.KC, Win32/AutoRun.IRCBot.AK, Win32/AutoRun.KS, Win32/AutoRun.VB.CX (2), Win32/AutoRun.VB.DP (2), Win32/Bagle.RD, Win32/BHO.NOR, Win32/Delf.ODU, Win32/Delf.OJB, Win32/Dialer.NAD, Win32/Hupigon.NOU, Win32/KillAV.NDT (4), Win32/KillProc.NAF, Win32/Kryptik.QR, Win32/Kryptik.QS, Win32/Mebroot.BL, Win32/Mebroot.BM (2), Win32/Mebroot.BN (2), Win32/Olmarik.GW, Win32/Olmarik.HG (2), Win32/Olmarik.HX (2), Win32/Olmarik.HY (2), Win32/Olmarik.HZ (2), Win32/OlmarikIA (2), Win32/Patched.AW, Win32/PcClient.NDW, Win32/Peerfrag.BD, Win32/Peerfrag.BE, Win32/PSW.Agent.NJL, Win32/PSW.OnLineGames.NMP (7), Win32/PSW.OnLineGames.NMY (11), Win32/PSW.OnLineGames.NNU (4), Win32/PSW.OnLineGames.ODJ (2), Win32/PSW.OnLineGames.OKC, Win32/PSW.OnLineGames.OKD, Win32/PSW.OnLineGames.XTT, Win32/Rootkit.Agent.NLY (2), Win32/Rustock.NIL (2), Win32/SpamTool.Agent.NCL, Win32/Spy.Banker.QYV (2), Win32/Spy.Banker.QYW (2), Win32/Spy.Banker.QYX (2), Win32/Spy.Zbot.JF (2), Win32/Spy.Zbot.RK, Win32/TrojanClicker.Delf.NHF, Win32/TrojanDownloader.Agent.OXA, Win32/TrojanDownloader.Agent.PCX, Win32/TrojanDownloader.Delf.ORH, Win32/TrojanDownloader.FakeAlert.AAX, Win32/TrojanDownloader.FakeAlert.ACE, Win32/TrojanDownloader.FakeAlert.ACT, Win32/TrojanDownloader.Small.OCS, Win32/TrojanDownloader.VB.NXX (2), Win32/TrojanDownloader.Zlob.CUG, Win32/TrojanDownloader.Zlob.CZW (2), Win32/TrojanDropper.Mudrop.NAM, Win32/TrojanDropper.VB.NHX (3), Win32/TrojanProxy.Small.NCA, Win32/Wigon.KU (2)
<p>URL: <a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6079&amp;Itemid=26">http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6079&amp;Itemid=26</a></p>
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/4110/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New cscope packages fix arbitrary code execution</title>
		<link>http://sechero.com/new-cscope-packages-fix-arbitrary-code-execution-2/</link>
		<comments>http://sechero.com/new-cscope-packages-fix-arbitrary-code-execution-2/#comments</comments>
		<pubDate>Mon, 25 May 2009 16:50:01 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[Arbitrary Code]]></category>
		<category><![CDATA[ASCII]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Mail]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[[SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution &#60;!&#8211; Envelope-to: email@address Delivery-date: Mon, 25 May 2009 17:47:31 +0100 Received: from outgoing.securityfocus.com ([205.206.231.26] helo=outgoing2.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M8dKl-0000wJ-NC for email@address; Mon, 25 May 2009 17:47:31 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing2.securityfocus.com (Postfix) with QMQP id C8835144259; Mon, 25 [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=86256">[SECURITY] [DSA 1806-1] New cscope packages fix arbitrary code execution</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Mon, 25 May 2009 17:47:31 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.26] helo=outgoing2.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M8dKl-0000wJ-NC 	for email@address; Mon, 25 May 2009 17:47:31 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing2.securityfocus.com" title="http://outgoing2.securityfocus.com" target="_blank">outgoing2.securityfocus.com</a> (Postfix) with QMQP 	id C8835144259; Mon, 25 May 2009 08:14:14 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 14511 invoked from network); 24 May 2009 08:28:08 -0000 Resent-Cc: recipient list not shown: ; Old-Return-Path: &lt;jmm@inutil.org&gt; X-Original-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Delivered-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> X-Virus-Scanned: at <a href="http://lists.debian.org" title="http://lists.debian.org" target="_blank">lists.debian.org</a> with policy bank moderated X-Spam-Flag: NO X-Spam-Score: -9.08 X-Spam-Level:  X-Spam-Status: No, score=-9.08 tagged_above=-10000 required=5.3 	tests=[BAYES_00=-2, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, 	IMPRONONCABLE_2=1, LDO_WHITELIST=-5, MURPHY_WRONG_WORD1=0.1, 	MURPHY_WRONG_WORD2=0.2, PGPSIGNATURE=-5, PHONENUMBER=1.5] 	autolearn=ham X-policyd-weight: using cached result; rate: -6.1 Message-ID: &lt;20090524082751.GA24821@galadriel.inutil.org&gt; MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.18 (2008-05-17) X-SA-Exim-Connect-IP: 82.83.229.75 X-SA-Exim-Mail-From: <a href="mailto:jmm@inutil.org" title="mailto:jmm@inutil.org">jmm@inutil.org</a> X-SA-Exim-Scanned: No (on <a href="http://inutil.org" title="http://inutil.org" target="_blank">inutil.org</a>); SAEximRunCond expanded to false X-Debian: PGP check passed for security officers Priority: urgent Resent-Message-ID: &lt;h-kgsMJsh7H.A.NWB.VUQGKB@liszt&gt; Reply-To: <a href="mailto:listadmin@securityfocus.com" title="mailto:listadmin@securityfocus.com">listadmin@securityfocus.com</a> Mail-Followup-To: <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Resent-Date: Sun, 24 May 2009 08:28:05 +0000 (UTC) Resent-From: <a href="mailto:list@liszt.debian.org" title="mailto:list@liszt.debian.org">list@liszt.debian.org</a> (Mailing List Manager) X-IMAPbase: 1176125385 9179 Status: O X-UID: 9179 Content-Length: 5245 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/new-cscope-packages-fix-arbitrary-code-execution-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New pidgin packages fix several vulnerabilities</title>
		<link>http://sechero.com/new-pidgin-packages-fix-several-vulnerabilities/</link>
		<comments>http://sechero.com/new-pidgin-packages-fix-several-vulnerabilities/#comments</comments>
		<pubDate>Fri, 22 May 2009 20:40:01 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[ASCII]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Mail]]></category>
		<category><![CDATA[Vulnerabilities]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities &#60;!&#8211; Envelope-to: email@address Delivery-date: Fri, 22 May 2009 21:32:55 +0100 Received: from outgoing.securityfocus.com ([205.206.231.27] helo=outgoing3.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M7bQF-0006gJ-A0 for email@address; Fri, 22 May 2009 21:32:55 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing3.securityfocus.com (Postfix) with QMQP id 99FB6237222; Fri, 22 May [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=86217">[SECURITY] [DSA 1805-1] New pidgin packages fix several vulnerabilities</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Fri, 22 May 2009 21:32:55 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.27] helo=outgoing3.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M7bQF-0006gJ-A0 	for email@address; Fri, 22 May 2009 21:32:55 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing3.securityfocus.com" title="http://outgoing3.securityfocus.com" target="_blank">outgoing3.securityfocus.com</a> (Postfix) with QMQP 	id 99FB6237222; Fri, 22 May 2009 14:26:26 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 29893 invoked from network); 22 May 2009 20:04:27 -0000 Resent-Cc: recipient list not shown: ; Old-Return-Path: &lt;jmm@inutil.org&gt; X-Original-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Delivered-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> X-Virus-Scanned: at <a href="http://lists.debian.org" title="http://lists.debian.org" target="_blank">lists.debian.org</a> with policy bank moderated X-Spam-Flag: NO X-Spam-Score: -9.06 X-Spam-Level:  X-Spam-Status: No, score=-9.06 tagged_above=-10000 required=5.3 	tests=[BAYES_00=-2, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, 	IMPRONONCABLE_2=1, LDO_WHITELIST=-5, MURPHY_DRUGS_REL8=0.02, 	MURPHY_WRONG_WORD1=0.1, MURPHY_WRONG_WORD2=0.2, PGPSIGNATURE=-5, 	PHONENUMBER=1.5] autolearn=ham X-policyd-weight: using cached result; rate: -6.1 Message-ID: &lt;20090522200408.GA6386@galadriel.inutil.org&gt; MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.18 (2008-05-17) X-SA-Exim-Connect-IP: 82.83.229.75 X-SA-Exim-Mail-From: <a href="mailto:jmm@inutil.org" title="mailto:jmm@inutil.org">jmm@inutil.org</a> X-SA-Exim-Scanned: No (on <a href="http://inutil.org" title="http://inutil.org" target="_blank">inutil.org</a>); SAEximRunCond expanded to false X-Debian: PGP check passed for security officers Priority: urgent Resent-Message-ID: &lt;PdP5w1tVwDM.A.YQC.GVwFKB@liszt&gt; Reply-To: <a href="mailto:listadmin@securityfocus.com" title="mailto:listadmin@securityfocus.com">listadmin@securityfocus.com</a> Mail-Followup-To: <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Resent-Date: Fri, 22 May 2009 20:04:22 +0000 (UTC) Resent-From: <a href="mailto:list@liszt.debian.org" title="mailto:list@liszt.debian.org">list@liszt.debian.org</a> (Mailing List Manager) X-IMAPbase: 1176125385 9167 Status: O X-UID: 9167 Content-Length: 12013 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/new-pidgin-packages-fix-several-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New ipsec-tools packages fix denial of service</title>
		<link>http://sechero.com/new-ipsec-tools-packages-fix-denial-of-service/</link>
		<comments>http://sechero.com/new-ipsec-tools-packages-fix-denial-of-service/#comments</comments>
		<pubDate>Wed, 20 May 2009 15:50:02 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[ASCII]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Mail]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[[SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service &#60;!&#8211; Envelope-to: email@address Delivery-date: Wed, 20 May 2009 16:44:13 +0100 Received: from outgoing.securityfocus.com ([205.206.231.26] helo=outgoing2.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M6nxl-0003Rd-1C for email@address; Wed, 20 May 2009 16:44:13 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing2.securityfocus.com (Postfix) with QMQP id AD9C0143B50; Wed, 20 [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=86110">[SECURITY] [DSA 1804-1] New ipsec-tools packages fix denial of service</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Wed, 20 May 2009 16:44:13 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.26] helo=outgoing2.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M6nxl-0003Rd-1C 	for email@address; Wed, 20 May 2009 16:44:13 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing2.securityfocus.com" title="http://outgoing2.securityfocus.com" target="_blank">outgoing2.securityfocus.com</a> (Postfix) with QMQP 	id AD9C0143B50; Wed, 20 May 2009 09:20:49 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 16939 invoked from network); 20 May 2009 14:08:33 -0000 Resent-Cc: recipient list not shown: ; Old-Return-Path: &lt;nion@debian.org&gt; X-Original-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Delivered-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> X-Virus-Scanned: at <a href="http://lists.debian.org" title="http://lists.debian.org" target="_blank">lists.debian.org</a> with policy bank moderated X-Spam-Flag: NO X-Spam-Score: -9.08 X-Spam-Level:  X-Spam-Status: No, score=-9.08 tagged_above=-10000 required=5.3 	tests=[BAYES_00=-2, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, 	IMPRONONCABLE_2=1, LDO_WHITELIST=-5, MURPHY_WRONG_WORD1=0.1, 	MURPHY_WRONG_WORD2=0.2, PGPSIGNATURE=-5, PHONENUMBER=1.5] 	autolearn=ham X-policyd-weight: using cached result; rate: -5 X-RZG-AUTH: :KHkJeFmIefYsEPPKCBl/ZNLv/wXfcKuujweZef2IiPbnG1Hpql+PuSVCX/7LuieLUUY= X-RZG-CLASS-ID: mo05 Message-ID: &lt;20090520140643.GA25319@ngolde.de&gt; MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed Content-Disposition: inline X-Mailer: netcat 1.10 X-GPG: 0x73647cff X-Debian: PGP check passed for security officers Priority: urgent Resent-Message-ID: &lt;w7iztNLAYjL.A.jXC.l7AFKB@liszt&gt; Reply-To: <a href="mailto:listadmin@securityfocus.com" title="mailto:listadmin@securityfocus.com">listadmin@securityfocus.com</a> Mail-Followup-To: <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Resent-Date: Wed, 20 May 2009 14:08:37 +0000 (UTC) Resent-From: <a href="mailto:list@liszt.debian.org" title="mailto:list@liszt.debian.org">list@liszt.debian.org</a> (Mailing List Manager) X-IMAPbase: 1176125385 9145 Status: O X-UID: 9144 Content-Length: 11560 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/new-ipsec-tools-packages-fix-denial-of-service/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CiscoWorks TFTP Directory Traversal Vulnerability</title>
		<link>http://sechero.com/ciscoworks-tftp-directory-traversal-vulnerability-2/</link>
		<comments>http://sechero.com/ciscoworks-tftp-directory-traversal-vulnerability-2/#comments</comments>
		<pubDate>Wed, 20 May 2009 15:30:02 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[ASCII]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Mail]]></category>
		<category><![CDATA[Vulnerability]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability &#60;!&#8211; Envelope-to: email@address Delivery-date: Wed, 20 May 2009 16:24:34 +0100 Received: from outgoing.securityfocus.com ([205.206.231.27] helo=outgoing3.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M6nek-00036X-Fh for email@address; Wed, 20 May 2009 16:24:34 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing3.securityfocus.com (Postfix) with QMQP id 5CB312374E7; Wed, 20 May 2009 [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=86108">Cisco Security Advisory: CiscoWorks TFTP Directory Traversal Vulnerability</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Wed, 20 May 2009 16:24:34 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.27] helo=outgoing3.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M6nek-00036X-Fh 	for email@address; Wed, 20 May 2009 16:24:34 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing3.securityfocus.com" title="http://outgoing3.securityfocus.com" target="_blank">outgoing3.securityfocus.com</a> (Postfix) with QMQP 	id 5CB312374E7; Wed, 20 May 2009 09:21:26 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 18351 invoked from network); 20 May 2009 15:04:06 -0000 X-TACSUNS: Virus Scanned Sender: <a href="mailto:nobody@cisco.com" title="mailto:nobody@cisco.com">nobody@cisco.com</a> Cc: <a href="mailto:psirt@cisco.com" title="mailto:psirt@cisco.com">psirt@cisco.com</a> Message-id: &lt;200905201050.cw@psirt.cisco.com&gt; Errors-To: <a href="mailto:nobody@cisco.com" title="mailto:nobody@cisco.com">nobody@cisco.com</a> Content-Type: Text/Plain; charset=&quot;us-ascii&quot; Prevent-NonDelivery-Report:  Content-Return: Prohibited Content-Transfer-Encoding: quoted-printable X-IMAPbase: 1176125385 9143 Status: O X-UID: 9142 Content-Length: 13356 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/ciscoworks-tftp-directory-traversal-vulnerability-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>4076</title>
		<link>http://sechero.com/4076/</link>
		<comments>http://sechero.com/4076/#comments</comments>
		<pubDate>Thu, 14 May 2009 10:42:24 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Botnet]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[AdWare]]></category>
		<category><![CDATA[Downloader]]></category>
		<category><![CDATA[Fake]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Trojan]]></category>
		<category><![CDATA[Win32]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[4076 BAT/KillFiles.NBH (2), BAT/TrojanDownloader.Ftp.NBZ (2), INF/Autorun, PDF/Exploit.Pidief.OMN, VBS/KillFiles.C, Win32/Adware.Agent.NMS (4), Win32/Adware.Antivirus2008, Win32/Adware.Antivirus2009, Win32/Adware.InternetAntivirus (4), Win32/Adware.PersonalAntivirus, Win32/Adware.PrivacyComponents, Win32/Adware.SystemSecurity, Win32/Adware.Virtumonde.NEK, Win32/Adware.VirusDoctor, Win32/Agent.NYC (2), Win32/Agent.PKG (2), Win32/Agent.PKH (2), Win32/Agent.PKI (2), Win32/Agent.WPI, Win32/AntiAV.AZQ (2), Win32/AntiAV.NAH (2), Win32/AutoRun.IRCBot.AG (2), Win32/AutoRun.KS, Win32/BHO.NOV, Win32/BHO.NOZ (3), Win32/DDoS.Agent.NAF (2), Win32/Delf.OII (3), Win32/Delf.OIJ, Win32/FlyStudio.NLE (6), Win32/FlyStudio.NLF, Win32/FlyStudio.NLG (6), Win32/Hupigon.GUWZ, Win32/Hupigon.NOK, Win32/IRCBot.ANN, Win32/Koutodoor.N, Win32/Kryptik.PH, Win32/PSW.Delf.NPF, Win32/PSW.OnLineGames.NMP [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6028&amp;Itemid=26">4076</a></h1>
</p>
<p>BAT/KillFiles.NBH (2), BAT/TrojanDownloader.Ftp.NBZ (2), INF/Autorun, PDF/Exploit.Pidief.OMN, VBS/KillFiles.C, Win32/Adware.Agent.NMS (4), Win32/Adware.Antivirus2008, Win32/Adware.Antivirus2009, Win32/Adware.InternetAntivirus (4), Win32/Adware.PersonalAntivirus, Win32/Adware.PrivacyComponents, Win32/Adware.SystemSecurity, Win32/Adware.Virtumonde.NEK, Win32/Adware.VirusDoctor, Win32/Agent.NYC (2), Win32/Agent.PKG (2), Win32/Agent.PKH (2), Win32/Agent.PKI (2), Win32/Agent.WPI, Win32/AntiAV.AZQ (2), Win32/AntiAV.NAH (2), Win32/AutoRun.IRCBot.AG (2), Win32/AutoRun.KS, Win32/BHO.NOV, Win32/BHO.NOZ (3), Win32/DDoS.Agent.NAF (2), Win32/Delf.OII (3), Win32/Delf.OIJ, Win32/FlyStudio.NLE (6), Win32/FlyStudio.NLF, Win32/FlyStudio.NLG (6), Win32/Hupigon.GUWZ, Win32/Hupigon.NOK, Win32/IRCBot.ANN, Win32/Koutodoor.N, Win32/Kryptik.PH, Win32/PSW.Delf.NPF, Win32/PSW.OnLineGames.NMP (2), Win32/PSW.OnLineGames.NMY (2), Win32/PSW.QQRob.NAQ, Win32/PSW.Small.NBD (4), Win32/Qhost, Win32/Qhost.NJR, Win32/Rootkit.Agent.NKV, Win32/Rootkit.Ressdt.NBA, Win32/Small.NFV (2), Win32/Spy.Banker.QRW, Win32/Spy.Banker.QRX (3), Win32/Spy.Banker.QRY, Win32/Spy.Zbot.JF, Win32/StartPage.DPE, Win32/StartPage.NKF, Win32/TrojanDownloader.Adload.NFM, Win32/TrojanDownloader.Agent.OZA, Win32/TrojanDownloader.Agent.PBU, Win32/TrojanDownloader.Agent.PBV, Win32/TrojanDownloader.Delf.OTL (2), Win32/TrojanDownloader.Delf.OYE (2), Win32/TrojanDownloader.FakeAlert.YV, Win32/TrojanDownloader.Small.OPC (2), Win32/TrojanDownloader.VB.MBZ (2), Win32/TrojanDropperAgent.OAK, Win32/TrojanDropper.Agent.OAL, Win32/TrojanDropper.VB.NHQ (2), Win32/TrojanDropper.VB.NHR, Win32/VB.ODS (2), Win32/VB.ODT (4)
<p>URL: <a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6028&amp;Itemid=26">http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6028&amp;Itemid=26</a></p>
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/4076/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>4070</title>
		<link>http://sechero.com/4070/</link>
		<comments>http://sechero.com/4070/#comments</comments>
		<pubDate>Wed, 13 May 2009 04:01:07 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Botnet]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[AdWare]]></category>
		<category><![CDATA[Downloader]]></category>
		<category><![CDATA[Fake]]></category>
		<category><![CDATA[Lab]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Trojan]]></category>
		<category><![CDATA[Win32]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[4070 BAT/TrojanDownloader.Ftp.NDD, PDF/Exploit.Pidief.OMJ, Win32/Adware.Coolezweb, Win32/Adware.InternetAntivirus (3), Win32/Adware.PersonalAntivirus, Win32/Adware.VirusAlarmPro, Win32/Adware.WinPCDefender (2), Win32/Agent.NYA (2), Win32/Agent.WPI, Win32/AutoRun.Agent.NR, Win32/Delf.OHR, Win32/Delf.OHS, Win32/Delf.OIE (3), Win32/Injector.OI, Win32/IRCBot.AGP, Win32/Kryptik.OK, Win32/Kryptik.OL, Win32/Kryptik.OP, Win32/Olmarik.HG, Win32/PSW.OnLineGames.NSU, Win32/PSW.OnLineGames.NTZ, Win32/PSW.OnLineGames.NZD (2), Win32/PSW.OnLineGames.NZN, Win32/PSW.OnLineGames.NZS, Win32/PSW.OnLineGames.NZT (2), Win32/Ransom.I, Win32/Rootkit.Agent.NLH, Win32/Spy.Banker.AFFJ, Win32/Spy.Banker.QLG, Win32/Spy.Banker.QLP, Win32/Spy.Banker.QRT (3), Win32/Spy.Pophot.NAO (55), Win32/Spy.Zbot.JF, Win32/TrojanClicker.VB.NFM, Win32/TrojanDownloader.Bredolab.AA, Win32/TrojanDownloader.FakeAlert.UM, Win32/VB.OCY (3) URL: http://www.eset.com/joomla/index.php?option=com_content&#38;task=view&#38;id=6021&#38;Itemid=26]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6021&amp;Itemid=26">4070</a></h1>
</p>
<p>BAT/TrojanDownloader.Ftp.NDD, PDF/Exploit.Pidief.OMJ, Win32/Adware.Coolezweb, Win32/Adware.InternetAntivirus (3), Win32/Adware.PersonalAntivirus, Win32/Adware.VirusAlarmPro, Win32/Adware.WinPCDefender (2), Win32/Agent.NYA (2), Win32/Agent.WPI, Win32/AutoRun.Agent.NR, Win32/Delf.OHR, Win32/Delf.OHS, Win32/Delf.OIE (3), Win32/Injector.OI, Win32/IRCBot.AGP, Win32/Kryptik.OK, Win32/Kryptik.OL, Win32/Kryptik.OP, Win32/Olmarik.HG, Win32/PSW.OnLineGames.NSU, Win32/PSW.OnLineGames.NTZ, Win32/PSW.OnLineGames.NZD (2), Win32/PSW.OnLineGames.NZN, Win32/PSW.OnLineGames.NZS, Win32/PSW.OnLineGames.NZT (2), Win32/Ransom.I, Win32/Rootkit.Agent.NLH, Win32/Spy.Banker.AFFJ, Win32/Spy.Banker.QLG, Win32/Spy.Banker.QLP, Win32/Spy.Banker.QRT (3), Win32/Spy.Pophot.NAO (55), Win32/Spy.Zbot.JF, Win32/TrojanClicker.VB.NFM, Win32/TrojanDownloader.Bredolab.AA, Win32/TrojanDownloader.FakeAlert.UM, Win32/VB.OCY (3)
<p>URL: <a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6021&amp;Itemid=26">http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6021&amp;Itemid=26</a></p>
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/4070/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated]</title>
		<link>http://sechero.com/ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities-updated/</link>
		<comments>http://sechero.com/ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities-updated/#comments</comments>
		<pubDate>Tue, 12 May 2009 16:44:14 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Vulnerabilities]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Bugtraq: CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated] CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated] URL: http://www.securityfocus.com/archive/1/503447]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://www.securityfocus.com/archive/1/503447">Bugtraq: CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated]</a></h1>
</p>
<p>CA20090126-01: CA Anti-Virus Engine Detection Evasion Multiple Vulnerabilities [Updated]
<p>URL: <a href="http://www.securityfocus.com/archive/1/503447">http://www.securityfocus.com/archive/1/503447</a></p>
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/ca-anti-virus-engine-detection-evasion-multiple-vulnerabilities-updated/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New qemu packages fix several vulnerabilities</title>
		<link>http://sechero.com/new-qemu-packages-fix-several-vulnerabilities/</link>
		<comments>http://sechero.com/new-qemu-packages-fix-several-vulnerabilities/#comments</comments>
		<pubDate>Mon, 11 May 2009 22:10:01 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[ASCII]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Mail]]></category>
		<category><![CDATA[Vulnerabilities]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[[SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities &#60;!&#8211; Envelope-to: email@address Delivery-date: Mon, 11 May 2009 23:09:40 +0100 Received: from outgoing.securityfocus.com ([205.206.231.26] helo=outgoing2.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M3dgq-0006mu-FW for email@address; Mon, 11 May 2009 23:09:40 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing2.securityfocus.com (Postfix) with QMQP id B91671437C3; Mon, 11 May [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=85856">[SECURITY] [DSA 1799-1] New qemu packages fix several vulnerabilities</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Mon, 11 May 2009 23:09:40 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.26] helo=outgoing2.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M3dgq-0006mu-FW 	for email@address; Mon, 11 May 2009 23:09:40 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing2.securityfocus.com" title="http://outgoing2.securityfocus.com" target="_blank">outgoing2.securityfocus.com</a> (Postfix) with QMQP 	id B91671437C3; Mon, 11 May 2009 15:13:52 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 8862 invoked from network); 11 May 2009 21:13:25 -0000 Resent-Cc: recipient list not shown: ; Old-Return-Path: &lt;jmm@inutil.org&gt; X-Original-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Delivered-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> X-Virus-Scanned: at <a href="http://lists.debian.org" title="http://lists.debian.org" target="_blank">lists.debian.org</a> with policy bank moderated X-Spam-Flag: NO X-Spam-Score: -10.58 X-Spam-Level:  X-Spam-Status: No, score=-10.58 tagged_above=-10000 required=5.3 	tests=[BAYES_00=-2, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, 	IMPRONONCABLE_2=1, LDO_WHITELIST=-5, MURPHY_WRONG_WORD1=0.1, 	MURPHY_WRONG_WORD2=0.2, PGPSIGNATURE=-5] autolearn=ham X-policyd-weight: using cached result; rate: -6.1 Message-ID: &lt;20090511211308.GA3953@galadriel.inutil.org&gt; MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.18 (2008-05-17) X-SA-Exim-Connect-IP: 82.83.235.163 X-SA-Exim-Mail-From: <a href="mailto:jmm@inutil.org" title="mailto:jmm@inutil.org">jmm@inutil.org</a> X-SA-Exim-Scanned: No (on <a href="http://inutil.org" title="http://inutil.org" target="_blank">inutil.org</a>); SAEximRunCond expanded to false X-Debian: PGP check passed for security officers Priority: urgent Resent-Message-ID: &lt;5W06-Zox0IG.A.AkF.yTJCKB@liszt&gt; Reply-To: <a href="mailto:listadmin@securityfocus.com" title="mailto:listadmin@securityfocus.com">listadmin@securityfocus.com</a> Mail-Followup-To: <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Resent-Date: Mon, 11 May 2009 21:13:22 +0000 (UTC) Resent-From: <a href="mailto:list@liszt.debian.org" title="mailto:list@liszt.debian.org">list@liszt.debian.org</a> (Mailing List Manager) X-IMAPbase: 1176125385 9031 Status: O X-UID: 9031 Content-Length: 4834 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/new-qemu-packages-fix-several-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>4063</title>
		<link>http://sechero.com/4063/</link>
		<comments>http://sechero.com/4063/#comments</comments>
		<pubDate>Fri, 08 May 2009 09:46:12 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Botnet]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[AdWare]]></category>
		<category><![CDATA[Downloader]]></category>
		<category><![CDATA[Fake]]></category>
		<category><![CDATA[Lab]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Trojan]]></category>
		<category><![CDATA[Win32]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[4063 BAT/KillFiles.NBG, BAT/Restart.NAA (2), HTML/Exploit.IESlice.BT (5), JS/Exploit.Pdfka.NJQ, JS/TrojanDownloader.Agent.NLL, JS/TrojanDownloader.Agent.NQB (4), JS/TrojanDownloader.Psyme.NFC (4), PDF/Exploit.Pidief.OLZ, PDF/Exploit.Pidief.OMA, PDF/Exploit.Pidief.OMB, PDF/Exploit.Pidief.OMC, PDF/Exploit.Pidief.OMD, PDF/Exploit.Pidief.OME, PDF/Exploit.Pidief.OMF, SWF/Exploit.Agent.AI, SWF/Exploit.Agent.AJ, SWF/TrojanDownloader.Agent.NAP (2), SWF/TrojanDownloader.Agent.NAQ (2), SWF/TrojanDownloader.Agent.NAR (2), SWF/TrojanDownloader.Agent.NAS (2), VBS/TrojanDownloader.Psyme.NFU (2), Win32/Adware.Antivirus2008, Win32/Adware.Coolezweb, Win32/Adware.PersonalAntivirus (2), Win32/Adware.Virtumonde.NEH, Win32/Adware.Virtumonde.NEI, Win32/Adware.Virtumonde.NEK (3), Win32/Adware.VirusDoctor, Win32/Agent.NGC, Win32/Agent.NGJ (4), Win32/Agent.NXU (6), Win32/Agent.NXV, Win32/AutoRun.ADC (2), Win32/AutoRun.Delf.BU (5), Win32/AutoRun.FakeAlert.AF, Win32/Delf.OHS, Win32/Delf.OHV (2), Win32/Delf.OHW [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6009&amp;Itemid=26">4063</a></h1>
</p>
<p>BAT/KillFiles.NBG, BAT/Restart.NAA (2), HTML/Exploit.IESlice.BT (5), JS/Exploit.Pdfka.NJQ, JS/TrojanDownloader.Agent.NLL, JS/TrojanDownloader.Agent.NQB (4), JS/TrojanDownloader.Psyme.NFC (4), PDF/Exploit.Pidief.OLZ, PDF/Exploit.Pidief.OMA, PDF/Exploit.Pidief.OMB, PDF/Exploit.Pidief.OMC, PDF/Exploit.Pidief.OMD, PDF/Exploit.Pidief.OME, PDF/Exploit.Pidief.OMF, SWF/Exploit.Agent.AI, SWF/Exploit.Agent.AJ, SWF/TrojanDownloader.Agent.NAP (2), SWF/TrojanDownloader.Agent.NAQ (2), SWF/TrojanDownloader.Agent.NAR (2), SWF/TrojanDownloader.Agent.NAS (2), VBS/TrojanDownloader.Psyme.NFU (2), Win32/Adware.Antivirus2008, Win32/Adware.Coolezweb, Win32/Adware.PersonalAntivirus (2), Win32/Adware.Virtumonde.NEH, Win32/Adware.Virtumonde.NEI, Win32/Adware.Virtumonde.NEK (3), Win32/Adware.VirusDoctor, Win32/Agent.NGC, Win32/Agent.NGJ (4), Win32/Agent.NXU (6), Win32/Agent.NXV, Win32/AutoRun.ADC (2), Win32/AutoRun.Delf.BU (5), Win32/AutoRun.FakeAlert.AF, Win32/Delf.OHS, Win32/Delf.OHV (2), Win32/Delf.OHW (2), Win32/FakeInit.I (3), Win32/FlyStudio.NKU, Win32/Fujacks, Win32/Hupigon.NOE, Win32/Injector.OA, Win32/IRCBot.ADZ, Win32/KillAV.NDC, Win32/Kryptik.MD, Win32/MeSub.AW, Win32/Olmarik.FT (24), Win32/Olmarik.GW, Win32/Olmarik.HG (2), Win32/Olmarik.HU, Win32/PSW.Delf.NPD, Win32/PSW.Lineage.NHZ, Win32/PSW.Lineage.NIA (2), Win32/PSW.OnLineGames.NMP, Win32/PSW.OnLineGames.NNM, Win32/PSW.OnLineGames.NNU (3), Win32/PSW.OnLineGames.NTR (2), Win32/PSW.OnLineGames.NUE, Win32/Qhost.NJK, Win32/Sivuxa.B, Win32/SpamTool.Agent.NCL, Win32/Spy.Banker.QEP, Win32/Spy.Banker.QRN, Win32/Spy.Delf.NKW (2), Win32/Spy.Zbot.JF (3), Win32/StartPage.NKD (2), Win32/StartPage.NKE, Win32/TrojanDownloader.Agent.OXO (2), Win32/TrojanDownloader.Agent.OZS, Win32/TrojanDownloader.Agent.PBI, Win32/TrojanDownloader.Agent.PBJ, Win32/TrojanDownloader.Agent.PBK, Win32/TrojanDownloader.Agent.PBL (2), Win32/TrojanDownloader.Banload.OPE (2), Win32/TrojanDownloader.Bredolab.AA (2), Win32/TrojanDownloader.FakeAlert.ABB, Win32/TrojanDownloader.FakeAlert.ABU, Win32/TrojanDownloader.FakeAlert.ABX, Win32/TrojanDownloader.Small.OOU, Win32/TrojanDownloader.Swizzor.NBF (4), Win32/TrojanDownloader.VB.NXZ, Win32/TrojanDownloader.VB.NYA (2), Win32/TrojanDropper.Agent.NYR, Win32/TrojanDropper.Agent.OAC, Win32/TrojanDropper.Agent.OAD (2), Win32/TrojanDropper.Agent.OAE, Win32/VB.NQP (2), Win32/VB.ODE, Win32/VB.ODF (2)
<p>URL: <a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6009&amp;Itemid=26">http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6009&amp;Itemid=26</a></p>
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/4063/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New libwmf packages fix denial of service</title>
		<link>http://sechero.com/new-libwmf-packages-fix-denial-of-service/</link>
		<comments>http://sechero.com/new-libwmf-packages-fix-denial-of-service/#comments</comments>
		<pubDate>Thu, 07 May 2009 23:20:02 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[ASCII]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Mail]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[[SECURITY] [DSA 1796-1] New libwmf packages fix denial of service &#60;!&#8211; Envelope-to: email@address Delivery-date: Fri, 08 May 2009 00:12:54 +0100 Received: from outgoing.securityfocus.com ([205.206.231.26] helo=outgoing2.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M2Clq-0004hf-E8 for email@address; Fri, 08 May 2009 00:12:54 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing2.securityfocus.com (Postfix) with QMQP id 6BA0A14377B; Thu, 7 [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=85762">[SECURITY] [DSA 1796-1] New libwmf packages fix denial of service</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Fri, 08 May 2009 00:12:54 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.26] helo=outgoing2.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M2Clq-0004hf-E8 	for email@address; Fri, 08 May 2009 00:12:54 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing2.securityfocus.com" title="http://outgoing2.securityfocus.com" target="_blank">outgoing2.securityfocus.com</a> (Postfix) with QMQP 	id 6BA0A14377B; Thu,  7 May 2009 15:29:48 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 20392 invoked from network); 7 May 2009 21:24:52 -0000 Resent-Cc: recipient list not shown: ; Old-Return-Path: &lt;nion@debian.org&gt; X-Original-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Delivered-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> X-Virus-Scanned: at <a href="http://lists.debian.org" title="http://lists.debian.org" target="_blank">lists.debian.org</a> with policy bank moderated X-Spam-Flag: NO X-Spam-Score: -7.08 X-Spam-Level:  X-Spam-Status: No, score=-7.08 tagged_above=-10000 required=5.3 	tests=[FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, IMPRONONCABLE_2=1, 	LDO_WHITELIST=-5, MURPHY_WRONG_WORD1=0.1, MURPHY_WRONG_WORD2=0.2, 	PGPSIGNATURE=-5, PHONENUMBER=1.5] autolearn=ham X-policyd-weight: DYN_NJABL=SKIP(0) NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_BL_NJABL=-1.5 DSBL_ORG=SKIP(0) CL_IP_EQ_HELO_IP=-2 (check from: .debian. &#8211; helo: .mo-p05-fb.rzone. &#8211; helo-domain: .rzone.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0; rate: -5 X-RZG-AUTH: :KHkJeFmIefYsEPPKCBl/ZNLv/wXfcKuujweZef2IiPbnG1Hpql+PuSVCXPTLuieFew== X-RZG-CLASS-ID: mo05 Message-ID: &lt;20090507162133.GA8784@ngolde.de&gt; MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed Content-Disposition: inline X-Mailer: netcat 1.10 X-GPG: 0x73647cff X-Debian: PGP check passed for security officers Priority: urgent Resent-Message-ID: &lt;CI5_ambNq2D.A.FTH.gG1AKB@liszt&gt; Reply-To: <a href="mailto:listadmin@securityfocus.com" title="mailto:listadmin@securityfocus.com">listadmin@securityfocus.com</a> Mail-Followup-To: <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Resent-Date: Thu,  7 May 2009 21:24:48 +0000 (UTC) Resent-From: <a href="mailto:list@liszt.debian.org" title="mailto:list@liszt.debian.org">list@liszt.debian.org</a> (Mailing List Manager) X-IMAPbase: 1176125385 9003 Status: O X-UID: 9003 Content-Length: 15649 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/new-libwmf-packages-fix-denial-of-service/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New Linux 2.6.18 packages fix several vulnerabilities</title>
		<link>http://sechero.com/new-linux-2618-packages-fix-several-vulnerabilities-2/</link>
		<comments>http://sechero.com/new-linux-2618-packages-fix-several-vulnerabilities-2/#comments</comments>
		<pubDate>Thu, 07 May 2009 14:10:01 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[ASCII]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Mail]]></category>
		<category><![CDATA[Vulnerabilities]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[[SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities &#60;!&#8211; Envelope-to: email@address Delivery-date: Thu, 07 May 2009 15:02:40 +0100 Received: from outgoing.securityfocus.com ([205.206.231.26] helo=outgoing2.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M24BL-00049p-Qi for email@address; Thu, 07 May 2009 15:02:40 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing2.securityfocus.com (Postfix) with QMQP id 8A1CE143CB2; Thu, 7 [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=85726">[SECURITY] [DSA 1794-1] New Linux 2.6.18 packages fix several vulnerabilities</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Thu, 07 May 2009 15:02:40 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.26] helo=outgoing2.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M24BL-00049p-Qi 	for email@address; Thu, 07 May 2009 15:02:40 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing2.securityfocus.com" title="http://outgoing2.securityfocus.com" target="_blank">outgoing2.securityfocus.com</a> (Postfix) with QMQP 	id 8A1CE143CB2; Thu,  7 May 2009 07:59:14 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 9708 invoked from network); 6 May 2009 23:24:04 -0000 Resent-Cc: recipient list not shown: ; Old-Return-Path: &lt;dannf@ldl.fc.hp.com&gt; X-Original-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Delivered-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> X-policyd-weight: DYN_NJABL=ERR NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_BL_NJABL=-1.5 DSBL_ORG=ERR CL_IP_EQ_HELO_IP=-2 (check from: .hp. &#8211; helo: .g1t0027.austin.hp. &#8211; helo-domain: .hp.)  FROM/MX_MATCHES_HELO(DOMAIN)=-2 &lt;client=15.216.28.34&gt; &lt;helo=g1t0027.austin.hp.com&gt; &lt;from=dannf@ldl.fc.hp.com&gt; &lt;to=debian-security-announce@lists.debian.org&gt;, rate: -7 X-Virus-Scanned: Debian amavisd-new at <a href="http://ldl.fc.hp.com" title="http://ldl.fc.hp.com" target="_blank">ldl.fc.hp.com</a> Message-ID: &lt;20090506232313.GF15333@ldl.fc.hp.com&gt; MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.18 (2008-05-17) X-Virus-Scanned: at <a href="http://lists.debian.org" title="http://lists.debian.org" target="_blank">lists.debian.org</a> with policy bank moderated X-Spam-Status: No, score=-9.56 tagged_above=3.6 required=5.3 	tests=[BAYES_00=-2, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, 	IMPRONONCABLE_1=1, IMPRONONCABLE_2=1, LDO_WHITELIST=-5, 	MURPHY_DRUGS_REL8=0.02, MURPHY_WRONG_WORD1=0.1, 	MURPHY_WRONG_WORD2=0.2, PGPSIGNATURE=-5] X-Spam-Level:  X-Debian: PGP check passed for security officers Priority: urgent Resent-Message-ID: &lt;4V7e3VNgAyN.A.EuF.NwhAKB@liszt&gt; Reply-To: <a href="mailto:listadmin@securityfocus.com" title="mailto:listadmin@securityfocus.com">listadmin@securityfocus.com</a> Mail-Followup-To: <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Resent-Date: Wed,  6 May 2009 23:23:57 +0000 (UTC) Resent-From: <a href="mailto:list@liszt.debian.org" title="mailto:list@liszt.debian.org">list@liszt.debian.org</a> (Mailing List Manager) X-IMAPbase: 1176125385 8993 Status: O X-UID: 8992 Content-Length: 62482 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/new-linux-2618-packages-fix-several-vulnerabilities-2/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>4059</title>
		<link>http://sechero.com/4059/</link>
		<comments>http://sechero.com/4059/#comments</comments>
		<pubDate>Thu, 07 May 2009 03:39:45 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Botnet]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[AdWare]]></category>
		<category><![CDATA[Downloader]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Trojan]]></category>
		<category><![CDATA[Win32]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[4059 JS/Agent.NAK (4), JS/Exploit.Pdfka.GS (2), JS/Exploit.Pdfka.IP, JS/Exploit.Pdfka.NCY, JS/Exploit.Pdfka.NJL, PDF/Exploit.Pidief.ASZ, PDF/Exploit.Pidief.ATC, PDF/Exploit.Pidief.OLP, PDF/Exploit.Pidief.OLQ, PDF/Exploit.Pidief.OLR, VBS/Disabler.NAB, Win32/Adware.Agent.NMG (6), Win32/Adware.Agent.NMQ (2), Win32/Adware.Antivirus2008, Win32/Adware.AntiVirusAgentPro (2), Win32/Adware.BHO.NEO, Win32/Adware.BHO.NGL, Win32/Adware.Coolezweb (3), Win32/Adware.InternetAntivirus (4), Win32/Adware.Virtumonde.NEK, Win32/Adware.WinAntiVirus, Win32/Adware.WinWebSecurity, Win32/Agent.NXS (2), Win32/Agent.OSE (2), Win32/Agent.PAR (2), Win32/Agent.PHC, Win32/Agent.PJL, Win32/Agent.WPI, Win32/AutoRun.ABH (2), Win32/AutoRun.Autoit.P, Win32/AutoRun.Delf.BT, Win32/AutoRun.FlyStudio.IQ, Win32/FlyStudio.NKR (2), Win32/FlyStudio.NKS, Win32/IRCBot.AMC, Win32/Koutodoor.G (2), Win32/Koutodoor.H, Win32/Peerfrag.AP, Win32/PSW.OnLineGames.NZD, Win32/PSW.OnLineGames.NZM, Win32/PSW.OnLineGames.NZN, [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6005&amp;Itemid=26">4059</a></h1>
</p>
<p>JS/Agent.NAK (4), JS/Exploit.Pdfka.GS (2), JS/Exploit.Pdfka.IP, JS/Exploit.Pdfka.NCY, JS/Exploit.Pdfka.NJL, PDF/Exploit.Pidief.ASZ, PDF/Exploit.Pidief.ATC, PDF/Exploit.Pidief.OLP, PDF/Exploit.Pidief.OLQ, PDF/Exploit.Pidief.OLR, VBS/Disabler.NAB, Win32/Adware.Agent.NMG (6), Win32/Adware.Agent.NMQ (2), Win32/Adware.Antivirus2008, Win32/Adware.AntiVirusAgentPro (2), Win32/Adware.BHO.NEO, Win32/Adware.BHO.NGL, Win32/Adware.Coolezweb (3), Win32/Adware.InternetAntivirus (4), Win32/Adware.Virtumonde.NEK, Win32/Adware.WinAntiVirus, Win32/Adware.WinWebSecurity, Win32/Agent.NXS (2), Win32/Agent.OSE (2), Win32/Agent.PAR (2), Win32/Agent.PHC, Win32/Agent.PJL, Win32/Agent.WPI, Win32/AutoRun.ABH (2), Win32/AutoRun.Autoit.P, Win32/AutoRun.Delf.BT, Win32/AutoRun.FlyStudio.IQ, Win32/FlyStudio.NKR (2), Win32/FlyStudio.NKS, Win32/IRCBot.AMC, Win32/Koutodoor.G (2), Win32/Koutodoor.H, Win32/Peerfrag.AP, Win32/PSW.OnLineGames.NZD, Win32/PSW.OnLineGames.NZM, Win32/PSW.OnLineGames.NZN, Win32/Rootkit.Agent.NIZ (2), Win32/Rootkit.Agent.NLJ (5), Win32/Sohanad.BM, Win32/Spy.Ambler.M, Win32/Spy.Ambler.X, Win32/Spy.Banker.PJS (2), Win32/Spy.Banker.PPG, Win32/Spy.Zbot.JF (3), Win32/TrojanClicker.BHO.NBA, Win32/TrojanClicker.Delf.NHH, Win32/TrojanClicker.VB.NFM (2), Win32/TrojanDownloader.Agent.OYF (2), Win32/TrojanDownloader.Agent.PBD, Win32/TrojanDownloader.Agent.PBE (2), Win32/TrojanDownloader.Delf.ORV (2), Win32/TrojanDownloader.Delf.OTG (2), Win32/TrojanDownloader.Delf.OTH, Win32/TrojanDownloader.Small.EVY, Win32/TrojanDownloader.Wigon.BY, Win32/TrojanDropper.Agent.NFC, Win32/TrojanDropper.Agent.NXN, Win32/TrojanDropper.Agent.OAA, Win32/VB.OCZ (3), Win32/Wigon, Win32/Wigon.KI
<p>URL: <a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6005&amp;Itemid=26">http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6005&amp;Itemid=26</a></p>
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/4059/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>New kdegraphics packages fix multiple vulnerabilities</title>
		<link>http://sechero.com/new-kdegraphics-packages-fix-multiple-vulnerabilities/</link>
		<comments>http://sechero.com/new-kdegraphics-packages-fix-multiple-vulnerabilities/#comments</comments>
		<pubDate>Wed, 06 May 2009 17:10:01 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[Bugtraq]]></category>
		<category><![CDATA[Email]]></category>
		<category><![CDATA[Mail]]></category>
		<category><![CDATA[Vulnerabilities]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[[SECURITY] [DSA 1793-1] New kdegraphics packages fix multiple vulnerabilities &#60;!&#8211; Envelope-to: email@address Delivery-date: Wed, 06 May 2009 18:02:53 +0100 Received: from outgoing.securityfocus.com ([205.206.231.27] helo=outgoing3.securityfocus.com) by lt.network5.net with esmtp (Exim 4.43) id 1M1kWC-0004En-FX for email@address; Wed, 06 May 2009 18:02:53 +0100 Received: from lists2.securityfocus.com (lists2.securityfocus.com [205.206.231.20]) by outgoing3.securityfocus.com (Postfix) with QMQP id A5A96236F58; Wed, 6 May [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://lists.rootsecure.net/?p=view&amp;l=bugtraq&amp;m=85696">[SECURITY] [DSA 1793-1] New kdegraphics packages fix multiple vulnerabilities</a></h1>
</p>
<p>&lt;!&#8211; Envelope-to: email@address Delivery-date: Wed, 06 May 2009 18:02:53 +0100 Received: from <a href="http://outgoing.securityfocus.com" title="http://outgoing.securityfocus.com" target="_blank">outgoing.securityfocus.com</a> ([205.206.231.27] helo=outgoing3.securityfocus.com) 	by <a href="http://lt.network5.net" title="http://lt.network5.net" target="_blank">lt.network5.net</a> with esmtp (Exim 4.43) 	id 1M1kWC-0004En-FX 	for email@address; Wed, 06 May 2009 18:02:53 +0100 Received: from <a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> (<a href="http://lists2.securityfocus.com" title="http://lists2.securityfocus.com" target="_blank">lists2.securityfocus.com</a> [205.206.231.20]) 	by <a href="http://outgoing3.securityfocus.com" title="http://outgoing3.securityfocus.com" target="_blank">outgoing3.securityfocus.com</a> (Postfix) with QMQP 	id A5A96236F58; Wed,  6 May 2009 10:56:00 -0600 (MDT) Mailing-List: contact <a href="mailto:bugtraq-help@securityfocus.com;" title="mailto:bugtraq-help@securityfocus.com;">bugtraq-help@securityfocus.com;</a> run by ezmlm Precedence: bulk List-Id: &lt;bugtraq.list-id.securityfocus.com&gt; List-Post: &lt;mailto:bugtraq@securityfocus.com&gt; List-Help: &lt;mailto:bugtraq-help@securityfocus.com&gt; List-Unsubscribe: &lt;mailto:bugtraq-unsubscribe@securityfocus.com&gt; List-Subscribe: &lt;mailto:bugtraq-subscribe@securityfocus.com&gt; Delivered-To: mailing list <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Delivered-To: moderator for <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Received: (qmail 19890 invoked from network); 6 May 2009 16:48:12 -0000 Resent-Cc: recipient list not shown: ; Old-Return-Path: &lt;noahm@klecker.debian.org&gt; X-Original-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Delivered-To: <a href="mailto:lists-debian-security-announce@liszt.debian.org" title="mailto:lists-debian-security-announce@liszt.debian.org">lists-debian-security-announce@liszt.debian.org</a> Message-Id: &lt;E1M1kHh-0001jg-93@klecker.debian.org&gt; Sender: Noah Meyerhans &lt;noahm@klecker.debian.org&gt; X-Virus-Scanned: at <a href="http://lists.debian.org" title="http://lists.debian.org" target="_blank">lists.debian.org</a> with policy bank moderated X-Spam-Status: No, score=-8.08 tagged_above=3.6 required=5.3 	tests=[BAYES_00=-2, FOURLA=0.1, FVGT_m_MULTI_ODD=0.02, 	IMPRONONCABLE_1=1, IMPRONONCABLE_2=1, LDO_WHITELIST=-5, 	MURPHY_WRONG_WORD1=0.1, MURPHY_WRONG_WORD2=0.2, PGPSIGNATURE=-5, 	PHONENUMBER=1.5] X-Spam-Level:  X-Debian: PGP check passed for security officers Priority: urgent Resent-Message-ID: &lt;2QMI7EQO13O.A.oMB.E9bAKB@liszt&gt; Reply-To: <a href="mailto:listadmin@securityfocus.com" title="mailto:listadmin@securityfocus.com">listadmin@securityfocus.com</a> Mail-Followup-To: <a href="mailto:bugtraq@securityfocus.com" title="mailto:bugtraq@securityfocus.com">bugtraq@securityfocus.com</a> Resent-Date: Wed,  6 May 2009 16:48:04 +0000 (UTC) Resent-From: <a href="mailto:list@liszt.debian.org" title="mailto:list@liszt.debian.org">list@liszt.debian.org</a> (Mailing List Manager) X-IMAPbase: 1176125385 8989 Status: O X-UID: 8989 Content-Length: 91401 X-Keywords:                                                                                                    </p>
<p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/new-kdegraphics-packages-fix-multiple-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>4055</title>
		<link>http://sechero.com/4055/</link>
		<comments>http://sechero.com/4055/#comments</comments>
		<pubDate>Wed, 06 May 2009 03:09:53 +0000</pubDate>
		<dc:creator>invalid string</dc:creator>
				<category><![CDATA[Botnet]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Virus]]></category>
		<category><![CDATA[AdWare]]></category>
		<category><![CDATA[Downloader]]></category>
		<category><![CDATA[Fake]]></category>
		<category><![CDATA[Lab]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Spyware]]></category>
		<category><![CDATA[Trojan]]></category>
		<category><![CDATA[Win32]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[4055 BAT/Agent.Y, PDF/Exploit.Pidief.OGU, PDF/Exploit.Pidief.OKV, Win32/Adware.Antivirus2008, Win32/Adware.AntiVirusAgentPro, Win32/Adware.InternetAntivirus (4), Win32/Adware.MalwareDoctor, Win32/Adware.MSAntispyware2009, Win32/Adware.OneStep (3), Win32/Adware.SpywareProtect2009, Win32/Adware.WinWebSecurity, Win32/Agent.NGC, Win32/Agent.PBE, Win32/Agent.PDB (2), Win32/Agent.PEP, Win32/Agent.PHC, Win32/Agent.PJH, Win32/Agent.WPI, Win32/Autoit.AG, Win32/AutoRun.ACB, Win32/AutoRun.FakeAlert.AF, Win32/AutoRun.FakeAlert.M, Win32/AutoRun.FlyStudio.IO, Win32/AutoRun.VB.DE, Win32/Boberog.W (2), Win32/Delf.OHP, Win32/FlyStudio.NKQ, Win32/Injector.NF, Win32/Koobface.FX (4), Win32/Koobface.NAY, Win32/Kryptik.OM, Win32/Kryptik.ON, Win32/LockScreen.E, Win32/Olmarik.FT (4), Win32/Olmarik.HM, Win32/Olmarik.HT, Win32/Patched.AT, Win32/PcClient (12), Win32/Peerfrag.AO, Win32/PSW.LdPinch.NEL, Win32/PSW.OnLineGames.NMP (2), Win32/PSW.OnLineGames.NNU (2), Win32/PSW.VB.NCL (3), Win32/PSW.WOW.DZI, [...]]]></description>
			<content:encoded><![CDATA[</p>
<p>
<h1><a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6000&amp;Itemid=26">4055</a></h1>
</p>
<p>BAT/Agent.Y, PDF/Exploit.Pidief.OGU, PDF/Exploit.Pidief.OKV, Win32/Adware.Antivirus2008, Win32/Adware.AntiVirusAgentPro, Win32/Adware.InternetAntivirus (4), Win32/Adware.MalwareDoctor, Win32/Adware.MSAntispyware2009, Win32/Adware.OneStep (3), Win32/Adware.SpywareProtect2009, Win32/Adware.WinWebSecurity, Win32/Agent.NGC, Win32/Agent.PBE, Win32/Agent.PDB (2), Win32/Agent.PEP, Win32/Agent.PHC, Win32/Agent.PJH, Win32/Agent.WPI, Win32/Autoit.AG, Win32/AutoRun.ACB, Win32/AutoRun.FakeAlert.AF, Win32/AutoRun.FakeAlert.M, Win32/AutoRun.FlyStudio.IO, Win32/AutoRun.VB.DE, Win32/Boberog.W (2), Win32/Delf.OHP, Win32/FlyStudio.NKQ, Win32/Injector.NF, Win32/Koobface.FX (4), Win32/Koobface.NAY, Win32/Kryptik.OM, Win32/Kryptik.ON, Win32/LockScreen.E, Win32/Olmarik.FT (4), Win32/Olmarik.HM, Win32/Olmarik.HT, Win32/Patched.AT, Win32/PcClient (12), Win32/Peerfrag.AO, Win32/PSW.LdPinch.NEL, Win32/PSW.OnLineGames.NMP (2), Win32/PSW.OnLineGames.NNU (2), Win32/PSW.VB.NCL (3), Win32/PSW.WOW.DZI, Win32/Rootkit.Small.XU, Win32/Rustock, Win32/Rustock.NID (2), Win32/SpamTool.Agent.NCL, Win32/Spy.Banker.QEO, Win32/Spy.Banker.QQZ (2), Win32/Spy.Banker.QRA (2), Win32/Spy.Banker.QRB (2), Win32/Spy.Banker.QRC (2), Win32/Spy.Banker.QRD, Win32/Spy.Banker.QRE, Win32/Spy.Banker.QRF (2), Win32/Spy.Zbot.JF (2), Win32/Spy.Zbot.PR, Win32/StartPage.NJY, Win32/Tinxy.AD, Win32/TrojanClicker.BHO.NBA (2), Win32/TrojanClicker.VB.NFM, Win32/TrojanDownloader.Agent.PAC (2), Win32/TrojanDownloader.Agent.PBB, Win32/TrojanDownloader.Banload.OPB (2), Win32/TrojanDownloader.Bredolab.AA (2), Win32/TrojanDownloader.Small.EVY, Win32/TrojanDownloader.Small.OOC, Win32/TrojanDownloader.Small.OOR (2), Win32/TrojanDropper.Agent.NZW, Win32/VB.NRG (3), Win32/VB.OCU (3), Win32/Wigon (2), Win32/Wigon.KQ (2)
<p>URL: <a href="http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6000&amp;Itemid=26">http://www.eset.com/joomla/index.php?option=com_content&amp;task=view&amp;id=6000&amp;Itemid=26</a></p>
</p></p>
]]></content:encoded>
			<wfw:commentRss>http://sechero.com/4055/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

