[NEWS] Mitnick Freedom Welcomed by His Website Defacement

From: support@securiteam.com
Date: 02/10/03

  • Next message: support@securiteam.com: "[EXPL] Exploit for CVS Double free() for Linux pserver" 
    From: support@securiteam.com
To: list@securiteam.com
Date: 10 Feb 2003 17:12:25 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    Beyond Security would like to welcome Tiscali World Online
    to our service provider team.
    For more info on their service offering IP-Secure,
    please visit http://www.worldonline.co.za/services/work_ip.asp
    - - - - - - - - -

      Mitnick Freedom Welcomed by His Website Defacement
    ------------------------------------------------------------------------

    SUMMARY

    Kevin Mitnick, possibly the world's famous hacker, has received a "warm"
    welcome for his return to the wired world. Just two weeks after he has
    reconnected himself to the Internet, a group called Bugbear defaced his
    company's web site (Defensive Thinking).

    DETAILS

    As can be seen here:
     
    <http://www.zone-h.org/defaced/2003/01/30/www.defensivethinking.com/hacked.html> http://www.zone-h.org/defaced/2003/01/30/www.defensivethinking.com/hacked.html

    Kevin Metnick's web site has been defaced, and its default web page
    replaced with the following message:
    "welcome back to freedom mr.kevin ;)

    BugBear is trying to tell u have forget to secure your box, it was fun and
    easy to break into your box ;)."

    Some might see this as proof that any site can be hacked if enough
    motivation is present. In our opinion, it proves that security experts
    should not be sloppy when it comes to securing their own "fortress".

    ADDITIONAL INFORMATION

    The information has been provided by <mailto:admin@zone-h.com> SyS64738
    of Zone-h.

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

    Relevant Pages

    • [NT] Vulnerability in HTML Help Allows Code Execution (MS05-001)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... * Microsoft Windows XP Service Pack 1 and Microsoft Windows XP Service ...
      (Securiteam)
    • [NT] Microsoft JScript Remote Code Execution (MS06-023)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... There is a remote code execution vulnerability in JScript. ... Configure Internet Explorer to prompt before running Active Scripting ...
      (Securiteam)
    • [NT] Cumulative Security Update for Internet Explorer (MS05-052)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... A remote code execution vulnerability exists in the way Internet Explorer ...
      (Securiteam)
    • [NT] Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (MS07-042)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... Vulnerability in Microsoft XML Core Services Could Allow Remote Code ... mode sets the security level for the Internet zone to High. ...
      (Securiteam)
    • [NT] Microsoft Data Access Components (MDAC) Function Code Execution (MS06-014)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... Microsoft Data Access Components Function Code Execution ... for the Internet security zone to prompt before running ActiveX controls. ...
      (Securiteam)