【酷客更新推荐】2006年5月第四期

[AcOol]

【资讯】

1、邪恶八进制被黑[图]

http://coolersky.com/news/hacker/2006/0515/832.html

2、业界四大反黑专家解读Web 2.0网站安全问题

http://coolersky.com/news/commerce/2006/0515/838.html

3、谁来为银联系统瘫痪埋单？

http://coolersky.com/news/authority/2006/0517/837.html

4、新蠕虫病毒Nugache利用P2P控制传播渠道

http://coolersky.com/news/virus/2006/0518/844.html

5、网钓黑客兴趣转移 MSN与MySpace成主要目标

http://coolersky.com/news/technique/2006/0518/846.html

6、美国国务院称所购联想电脑不会用于机密工作

http://coolersky.com/news/authority/2006/0519/851.html

7、台湾军方称电脑网络遭到大陆黑客的攻击

http://coolersky.com/news/hacker/2006/0519/852.html

8、雅虎通遭古怪蠕虫袭击 流氓软件挟持用户IE

http://coolersky.com/news/virus/2006/0522/856.html

9、微软Word新木马蔓延 危及Windows系统安全

http://coolersky.com/news/affiche/2006/0522/857.html

10、韩国大黑客落入法网 共控制133国1.6万台PC

http://coolersky.com/news/hacker/2006/0522/858.html

【文档】

1、dvbbs7.1 sp1 savepost.asp注入漏洞的研究和利用

http://coolersky.com/articles/hack/analysis/programme/2006/0515/238.html

2、Dvbbs7.1 sp1 SQL版savepost.asp注入漏洞分析、利用及防范

http://coolersky.com/articles/hack/analysis/programme/2006/0515/239.html

3、使用DreamPackPL清除Win2000/XP登录密码

http://coolersky.com/articles/security/disaster/tools/2004/1119/242.html

4、信息安全产业三部曲之"敦刻尔克大撤退"

http://coolersky.com/articles/security/manage/synthesis/2006/0516/240.html

5、Tomcat 5.0.28安装笔记

http://coolersky.com/articles/base/app/web/2004/1021/243.html

6、ORACLE注入万网

http://coolersky.com/articles/hack/particular/example/2004/1027/244.html

7、感受Shutdown系统命令的魅力

http://coolersky.com/articles/base/os/winxp/2006/0519/245.html

8、Jsp+Mysql注入网易

http://coolersky.com/articles/hack/particular/example/2006/0519/246.html

9、内存不能为read（或written）错误详解

http://coolersky.com/articles/hack/particular/example/2006/0519/246.html

10、ADSL账号密码保卫战

http://coolersky.com/articles/security/network/defend/2006/0519/249.html

【下载】

1、Web 2.0网站安全培训资料

http://coolersky.com/download/book/meeting/2006/0517/199.html

2、Daemon Tools v4.03 For x86 32bits

http://coolersky.com/download/incommon/disk/2006/0519/200.html

3、Daemon Tools v4.03 For x86 64bits

http://coolersky.com/download/incommon/disk/2006/0519/201.html

4、网际快车FlashGet 1.71简体中文版

http://coolersky.com/download/incommon/download/2006/0307/202.html

5、红色风暴星际争霸彩色名字修改器 v1.01

http://coolersky.com/download/incommon/game/2003/0415/206.html

6、星际争霸彩色名字修改器v1.1 加强版

http://coolersky.com/download/incommon/game/2005/0224/207.html

7、反恐精英CS1.5硬盘安装版

http://coolersky.com/download/incommon/game/2006/0123/212.html

8、RealVNC 4.1.0 - 4.1.1 (VNC Null Authentication) Vulnerability
Scanners For Win

http://coolersky.com/download/hacker/scan/2006/0519/213.html

9、RealVNC 4.1.0 - 4.1.1 (VNC Null Authentication) Vulnerability
Scanners For Linux

http://coolersky.com/download/hacker/scan/2006/0519/214.html

【漏洞】

1、动网论坛(DVBBS 7.1.0 SP1)Savepost.asp存在严重漏洞

http://coolersky.com/leak/programme/bbs/2006/0515/515.html

2、RealVNC远程认证绕过漏洞

http://coolersky.com/leak/app/rc/2006/0516/516.html

3、Symantec Enterprise Firewall/Gateway Security
HTTP代理泄露内部IP漏洞

http://coolersky.com/leak/security/firewall/2006/0512/517.html

4、phpBB可作为HTTP代理使用漏洞

http://coolersky.com/leak/programme/bbs/2006/0515/518.html

5、Foing多个远程文件包含漏洞

http://coolersky.com/leak/programme/website/2006/0516/519.html

6、多家厂商SSH Server远程缓冲区溢出漏洞

http://coolersky.com/leak/app/rc/2006/0516/520.html

7、Caucho Resin viewfile远程文件及路径泄露漏洞

http://coolersky.com/leak/app/web/2006/0517/521.html

8、Caucho Resin远程目录遍历漏洞

http://coolersky.com/leak/app/web/2006/0517/522.html

9、Microsoft Windows角色扮演权限提升漏洞

http://coolersky.com/leak/os/windows/2006/0517/523.html

10、Sun Java系统目录服务器认证绕过漏洞

http://coolersky.com/leak/app/directory/2006/0517/524.html

11、FCKeditor Type变量文件上传漏洞

http://coolersky.com/leak/programme/webscript/2006/0518/527.html

12、Snitz Forums Avatar模块任意文件上传漏洞

http://coolersky.com/leak/programme/bbs/2006/0518/529.html

【论坛精华】

1、广东民企相中最牛女秘书 欲聘做商学院院长

http://bbs.coolersky.com/forum_posts.asp?TID=236&PN=1

【其他信息】

1、孙彤宇 - 淘宝孙彤宇就"流氓软件"问题公开致歉

http://coolersky.com/record/individual/2006/0518/68.html