It appears there are three different error messages, possibly depending when the the post is being accessed or depending from the country. The latest error outside of US is:
We are currently unable to serve your request
We apologize, but an error occurred and your request could not be completed.
Link http://isc.sans.org/diary.php?storyid=1816
mentioned has not been working during some hours.
It will open only a blank page with 'Previous' and 'Next' links to other SANS Diary entries.
SecuriTeam Blogs had entry related to French-based hosting company Jaguar Network on Feb 21th. Blog entry lists WHOIS information about this MSN's partner. The entry is discussing about the risks of registration when using Microsoft's Search & Win too:
http://blogs.securiteam.com/index.php/archives/316
As a same day several flaws were reported, classified as Moderate Risk:
http://www.frsirt.com/english/advisories/2005/1789
'These could be exploited by attackers to bypass certain security restrictions or conduct spoofing and cross site scripting attacks.'
'An unspecified drag-and-drop error allowing unintentional file uploads.' How many security issues like this we'll see in the future. Bad boys are interested about Opera too.
Mozilla Foundation has published a security advisory entitled "What Mozilla users should know about the IDN buffer overflow security issue" located at http://www.mozilla.org/security/idn.html . They say there is a small download (i.e..xpi package) coming in the near future which will make this IDN configuration change automatically.
Erik, you linked to your online store. Nice try. That submission field is not for that purposes, it's for contact address! Please leave that field blank, everybody know it's not funny!
SANS ISC has list about suspicious domain names with descriptions collected by their handler team and volunteer readers. There are about 250 domains including words hurricane, disaster, Katrina, victims, help, donate etc. at http://isc.sans.org/katrina.com.txt . Some of these sites was used to fake donations. Now ISPs have killed those raudulent websites, ISC reported recently at http://isc.sans.org/diary.php?date=2005-09-03 Diary.
Slashdot Mirror
It appears there are three different error messages, possibly depending when the the post is being accessed or depending from the country. The latest error outside of US is: We are currently unable to serve your request We apologize, but an error occurred and your request could not be completed.
Hmm, at time of writing (and during several hours as well) the link goes to Log In page.
Yes, generates text We're sorry, but it appears the page you want no longer exists or perhaps never did.
This Guardian (UK) article states that Technology imported from Ukraine was used to decode the tones from the transactions and turn them into [computer] information:6 ,00.html
http://www.guardian.co.uk/crime/article/0,,194802
Link http://isc.sans.org/diary.php?storyid=1816 mentioned has not been working during some hours. It will open only a blank page with 'Previous' and 'Next' links to other SANS Diary entries.
FAQ document here: http://blogs.securiteam.com/?p=640
There is related Frequently Asked Questions document published too, it was mentioned at CVE entry http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE- 2006-3590 of this PowerPoint vulnerability:
http://blogs.securiteam.com/?p=508
SecuriTeam Blogs had entry related to French-based hosting company Jaguar Network on Feb 21th. Blog entry lists WHOIS information about this MSN's partner. The entry is discussing about the risks of registration when using Microsoft's Search & Win too: http://blogs.securiteam.com/index.php/archives/316
In fact, Mr. Bruce Schneier has a blog posting about this subject from October already: http://www.schneier.com/blog/archives/2005/10/pass port_requir.html
Internet Storm Center has information about new variant reported by TrendMicro:
u lt5.asp?VName=ELF_LUPPER.B&VSect=P
http://isc.sans.org/diary.php?storyid=829
and the description itself is at http://www.trendmicro.com/vinfo/virusencyclo/defa
Result when rating: "Page Not Found The page you are looking for is temporarily unavailable or no longer exists." McAfee really sucks!
Symantec has a more coverage description page at http://securityresponse.symantec.com/avcenter/venc /data/linux.plupii.html
including links to XML-RPC PHP1.x library vulnerabilities used by this malware.
This worm is also known as Linux.Plupii and Linux/Lupper.A too.
Internet Storm Center has a lot of technical information at their
http://isc.sans.org/diary.php?storyid=823
It seems that Secunia advisory has new information now, late update from Friday says that Linux issue was fixed: http://secunia.com/advisories/16901/
As a same day several flaws were reported, classified as Moderate Risk: http://www.frsirt.com/english/advisories/2005/1789
'These could be exploited by attackers to bypass certain security restrictions or conduct spoofing and cross site scripting attacks.'
'An unspecified drag-and-drop error allowing unintentional file uploads.' How many security issues like this we'll see in the future. Bad boys are interested about Opera too.
What was the reason to use a commercial author link when posted, Mr. Peterson.
This about:config method works in the newest Netscape 8.0.3.3 http://www.frsirt.com/english/advisories/2005/1691 too.
Mozilla Foundation has published a security advisory entitled "What Mozilla users should know about the IDN buffer overflow security issue" located at http://www.mozilla.org/security/idn.html . They say there is a small download (i.e. .xpi package) coming in the near future which will make this IDN configuration change automatically.
There is a separate advisory from FrSIRT with their severity level at http://www.frsirt.com/english/advisories/2005/1690 where they list Mozilla Firefox version 1.0.6 and prior, Mozilla Firefox version 1.5 Beta 1 and prior and Mozilla Suite version 1.7.1.1 and prior.
Netscape 8 based to Firefox codebase is not immune: http://www.frsirt.com/english/advisories/2005/1691
Erik, you linked to your online store. Nice try. That submission field is not for that purposes, it's for contact address! Please leave that field blank, everybody know it's not funny!
Mozilla community has a separate Bugzilla entry at https://bugzilla.mozilla.org/show_bug.cgi?id=76162 . However, sites tested (SSL2 turned of via Tools menu) after May '05 are listed to http://wiki.mozilla.org/Necko:SSL_v2_Sites Wiki page.
SANS ISC has list about suspicious domain names with descriptions collected by their handler team and volunteer readers. There are about 250 domains including words hurricane, disaster, Katrina, victims, help, donate etc. at http://isc.sans.org/katrina.com.txt . Some of these sites was used to fake donations. Now ISPs have killed those raudulent websites, ISC reported recently at http://isc.sans.org/diary.php?date=2005-09-03 Diary.
Experience of that Creative already has: http://hardware.slashdot.org/article.pl?sid=05/08/ 30/0118252&tid=184&tid=220