Showing posts with label Zero Day. Show all posts
Showing posts with label Zero Day. Show all posts

Tuesday, January 15, 2013

Security & Hacking: "Cisco Linksys Remote Preauth 0day Root Exploit "





From DefenseCode http://blog.defensecode.com/2013/01/defensecode-security-advisory-upcoming.html

"Exploit shown in this video has been tested on Cisco Linksys WRT54GL, but other 
Linksys versions/models are probably also affected.
Cisco Linksys is a very popular router with more than 70,000,000 routers sold.
That's why we think that this vulnerability deserves attention.

According to our vulnerability disclosure policy, the vulnerability details will be
disclosed in following 2 weeks on http://www.defensecode.com/, BugTraq and
Full Disclosure."

Related:

Friday, January 11, 2013

Security & Hacking: Java Zero Day

Another day, another Zero Day, Java this time, seems to be general concensus is to uninstall it if possible for your situation, I haven't seen anything one way or the other if Firefox + NoScript is vulnerable or not, or if Chrome is vulnerable or not.

I would think that Firefox with NoScript would offer some protection, but I don't have the correct expertise to know or test that myself currently.

Would welcome any info yes or no about Firefox+NoScript and/or Google Chrome and this Zero Day.

How To Disable Java in Browsers:

How To Disable Java in Google Chrome: enter chrome://plugins/ in location bar (where URL's go, NOTE: you can Bookmark chrome://plugins/ so you don't have to manually type it in future), then click Disable. See http://nakedsecurity.sophos.com/how-to-disable-java-chrome/ for illustrations/screenshots.

How To Disable Java in Firefox:  Go to Add Ons (or Tools then Add Ons depending on your OS),  click the Add Ons Tab, Disable Java.  See http://nakedsecurity.sophos.com/how-to-disable-java-firefox/ for Screenshots.


How To Disable Java on IE (Internet Explorer), I haven't used IE in so many years, I am not going to write anything, just go to http://nakedsecurity.sophos.com/how-to-disable-java-internet-explorer/ for clear instructions with Screenshots, I think it is easier just to uninstall Java if your using IE, but I don't trust my memory on IE, because it has been so long since I used it.

How to Disable Java in Safari:  Easily done, go to Preferences in Safari, Select Security, Uncheck Java.  Again for Screenshots see http://nakedsecurity.sophos.com/how-to-disable-java-safari/

Honestly I reccomend leaving it disabled, all my Browsers have had it disabled for a long time, I have not noticed any problems.

I recommend the same for Javascript.

For further reading: