Week 20 in Review – 2009

Tools:

• nmap 4.85BETA9 – nmap.org

Vulnerabilities:

• IIS 6.0 webdav authentication bypass
  • Microsoft Security Advisory 971492 – microsoft.com
  • Bypassing Remote WebDav Auth IIS 6.0 – g0thacked.wordpress.com

Other News:

• Secret questions are too easily guessed
  • Are Your "Secret Questions" Too Easily Answered? – technologyreview.com
  • Study Shows "Secret Questions" Are Too Easily Guessed – slashdot.org
• Gumblar malware
  • Gumblar – An Analysis and History – websense.com
  • ‘Gumblar’ attacks spreading quickly – cnet.com