Slashdot Mirror

← Back to Domains

Domain: nextgenss.com

Stories and comments across the archive that link to nextgenss.com.

Stories · 2

  1. WinAmp Security Hole Discovered, Patched

    It · Security · · posted by simoniker · from the cha-cha-oops dept. · 393 comments
    Sbarbero writes "According to Techworld.com, a significant security hole has been discovered in NullSoft's WinAmp, meaning everyone should upgrade to the 5.03 version the makers have just put out right now. Security company NGS has found that the exploit 'can be activated remotely simply by rendering a specially crafted html document' and will run arbitrary code - they have a full advisory on their site." Oddly enough, the vulnerability is in the playback for the classic .XM 'tracker' music format.

  2. MS SQL Server Worm Wreaking Havoc

    Microsoft · · posted by ryuzaki0 · from the no-man-will-know-the-day-or-the-hour dept. · 906 comments
    defile writes "Since about midnight EST almost every host on the internet has been receiving a 376 byte UDP payload on port ms-sql-m (1434) from a random infected server. Reports of some hosts receiving 10 per minute or more. internetpulse.net is reporting UUNet and Internap are being hit very hard. This is the cause of major connectivity problems being experienced worldwide. It is believed this worm leverages a vulnerability published in June 2002. Several core routers have taken to blocking port 1434 outright. If you run Microsoft SQL Server, make sure the public internet can't access it. If you manage a gateway, consider dropping UDP packets sent to port 1434." bani adds "This has effectively disabled 5 of the 13 root nameservers."