spoofing vulnerability

TechRepublic Resources

• sort by:
• Relevance
• Date
• Popularity

New vulnerabilities surface in IE, other browsers

Smaller threats continue to plague security managers with the usual flood of less-than-critical vulnerabilities and serious threats with products that have a smaller installed base. From new browser vulnerabilities to a problem with several media players, John McCormick has the details in this edition of the IT Locksmith. Just...

Tags: Microsoft Internet Explorer, John McCormick, Web browsers, SECURITY, spoofing vulnerability, Microsoft Corp., Web browser, vulnerability, IT Locksmith Newsletter, Workaround, Threat, U.S. Supreme Court, Internet

Technical articles 2005-07-01

Additional Resources

IP Spoofing: An Introduction

IP spoofing is one of the most common forms of on-line camouflage. In IP spoofing, an attacker gains unauthorized access to a computer or a network by making it appear that a malicious message has come from a trusted machine by "spoofing" the IP address of that machine. This paper...

Tags: IP, SecurityFocus, Network Technology, Networking

White papers 2003-03-11

Vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 Could Allow Internet Content Spoofing (888258) (exe)

A spoofing vulnerability exists in ISA Server 2000 that could enable an attacker to spoof trusted Internet content. This vulnerability could enable an attacker to spoof trusted Internet content. Users could believe they are accessing trusted Internet content when in reality they are accessing malicious Internet content, for example a...

Tags: Attacker, Vulnerability, Server, Microsoft Corp., Internet Security, Internet, Security

Software downloads 2007-09-13

Defending Against TCP SYN Flooding Attacks Under Different Types of IP Spoofing

TCP-based flooding attacks are a common form of Distributed Denial-of-Service DDoS attacks which abuse network resources and can bring about serious threats to the Internet. Incorporating IP spoofing makes it even more decoct to defend against such attacks. Among different IP spoofing techniques, which include random spoofing, subnet spoofing and...

Tags: Wuhan University, IP, TCP, Subnet, Attack, Tcp/Ip, Networking, Security

White papers 2006-01-06

Security Update for SharePoint Team Services (KB911701) (exe)

A cross-site scripting and spoofing vulnerability exists in SharePoint Team Services from Microsoft. This update fixes that vulnerability. This version is the first release on CNET Download.com.

Tags: Security, Microsoft SharePoint, Vulnerability, Microsoft Corp., Microsoft SharePoint Team Services, Groupware, Enterprise Software, Software

Software downloads 2007-09-20

Vulnerability in Microsoft Proxy Server 2.0 Could Allow Internet Content Spoofing (888258) (exe)

Vulnerability could enable an attacker to spoof trusted Internet content. Users could believe they are accessing trusted Internet content when in reality they are accessing malicious Internet content, for example a malicious Web site. However, an attacker would first have to persuade a user to visit the attackers site to...

Tags: Microsoft Proxy Server, Attacker, Vulnerability, Microsoft Corp., Internet, Security

Software downloads 2007-09-13

Security Update for FrontPage 2002 Server Extensions (KB911831) (exe)

A cross-site scripting and spoofing vulnerability exists in FrontPage 2002 Server Extensions. This update fixes that vulnerability. This version is the first release on CNET Download.com.

Tags: Microsoft FrontPage, Vulnerability, Server, Microsoft FrontPage 2002, Security

Software downloads 2007-10-03

IP Spoofing issue

I run a 2004 ISA server. When 2 of my VPN clients connect to the LAN via PPTP, their IP addresses generates a whole lot of IP spoofing attack logs.Can anyone tell me wheter these are False positives or ???????Thanks for your helpCheersDo those clients have hard coded IP addresses...

Tags: Network technology, NETWORKING, VPNs, Network security, IP, IP Spoofing, ISA

Q&A 2005-02-28

Firefox 2 crash exploit and IE7 address spoofing flaw surfaces

Internet Explorer is more dangerous to use than FirefoxVulnerability advisory stats are like counting the number of people who leave their front door unlocked. I care more about how many thieves are ravaging the neighborhood. I care more about [u]un

Tags: browsers, exploit, george ou, Microsoft Internet Explorer, Microsoft Internet Explorer 7, Mozilla Firefox, Mozilla Firefox 2.0, security, software, TechExec2

Discussion threads 2006-10-27

Exchange 2000/2003 relaying/spoofing

Hey all-Has anyone here come across an easily digestible way to tie an Exchange server down so that relaying and spoofing/weak password account hijacking become much less likely to occur in a large organization?Thanks,RaphThis is not an ea

Tags: Exchange, Microsoft Exchange Server, tool, raphdg@..., e-mail

Discussion threads 2005-04-05

Prevention of IP Spoofing in TCP/IP Connection: Vulnerability Ability and Probable Solutions - A Reverse Engineering Approach

In network environment the computer facilities are interconnected by using the Transmission Control Protocol - Internet Protocol suite. The TCP specification consists of several vulnerabilities and an equal number of weaknesses in its implementation. These drawbacks may allow an intruder to break into the network, and enable him to take...

Tags: IP, TCP, Reverse Engineering, TCP Specification, Tcp/Ip, Networking

White papers 2003-11-25

Don't Get Hacked: Automated Remote Vulnerability Scanning

This white paper describes advantages of using Open Source Vulnerability Analysis tools to protect the Internet facing servers. While acknowledging that Vulnerability Analysis is only a part of the solution to securing the server, it is clear that a reliable ongoing vulnerability analysis is a step in the right direction.

Tags: Vulnerability, Internet, Productivity, Servers, Hardware

White papers 2007-08-01

A Systematic Approach to Uncover Security Flaws in GUI Logic

To achieve end-to-end security, traditional machine-to-machine security measures are insufficient if the integrity of the human-computer interface is compromised. GUI logic flaws are category of software vulnerabilities that result from logic bugs in GUI design/implementation. Visual spoofing attacks that exploit these flaws can lure even security-conscious users to perform unintended...

Tags: GUI, Web Browser, Flaw, Security

White papers 2007-03-25

Automated Vulnerability Detection System

Vulnerability assessments have been recently identified, by independent market research, as one of the most sought after managed security outsourcing services. As with the outsourcing of any business function, the final decision is based on whether or not a trusted partner can do the job more efficiently, cheaper, and perhaps...

Tags: Vulnerability Assessment, Outsourcing, Security, It Operations, Business Operations, Outsourcing & Subcontracting

White papers 2006-08-16

IDND (xpi)

Puts a little flag in the status bar that tells you whether you are visiting a Traditional Domain Name green TDN or an International Domain Name (UN-blue IDN). IDN's can be used for phishing or spoofing, so suspicious IDN's cause an optional alert box to appear further warning you to...

Tags: Aaron Irvine, IDN, Phishing, Cyberthreats, Spam, Web Browsers, Viruses And Worms, Security, Spam And Phishing, Internet

Software downloads 2007-09-19

Vulnerability Anti.dote - The End to Enterprises' Security Patch Management Headaches

Every malware attack, by definition, exploits a vulnerability. Finjan's Vulnerability Anti.dote identifies specific vulnerabilities and their variants, and using advanced behavior analysis proactively blocks any active content trying to exploit such a vulnerability. This means that you are protected against malware exploits, such as IFrame, even before software vendors have...

Tags: Vulnerability, Finjan Software Inc., Malware, Spyware, Adware & Malware, Cyberthreats, Security, Viruses And Worms

White papers 2005-02-01

Understanding E-Mail Spoofing

Spam and e-mail-laden viruses can take a lot of the fun and utility out of electronic communications, but at least you can trust e-mail that comes from people you know - except when you can't. A favorite technique of spammers and other "bad guys" is to "spoof" their return e-mail...

Tags: E-mail, Internet, Online Communications, Spam, Security, Spam And Phishing

White papers 2004-10-29

SecureCentral ScanFi (zip)

ScanFi is a Web-based vulnerability assessment scanner for detecting and assessing network vulnerabilities across heterogeneous networks. ScanFi discovers, scans, reports, and supports vulnerability remediation. It features both scheduled and on-demand vulnerability scanning capabilities, based on comprehensive vulnerability database collated from multiple sources and vendors that is constantly kept up-to-date.

Tags: Network, Vulnerability, On-demand, Vulnerability Assessment, AdventNet Inc., ScanFi, Scanners, Security, Hardware, Peripherals

Software downloads 2005-08-04

Spoofing bug found in IE 7

Correct link to the image galleryIE 7 spoofing bughttp://news.com.com/2300-1002_3-6129615-1.htmlSo......If I don't use IE7 which I cannot am I safe?Woooooo HooooooJust kidding, I know we all need extra protection these days, I have multiple layers of defence installed, I even pass Steve Gibsons "ShieldsUp!" test on GRC.comI use multi boot systems...

Tags: bug, ie 7, Microsoft Internet Explorer, Microsoft Internet Explorer 7, news, security, software, Sonja Thompson

Discussion threads 2006-10-26

Why there's no such thing as a zero day vulnerability

Thanks ChadI have seen on this board and other, someone calling every vulnerability "zero-day". What is worse is when the Media begins to report every new vulnerability as zero day further diluting the term. Overall, if the term had some usefulness it has long since passed. Excellent...

Tags: faradhi

Discussion threads 2007-10-06