Multiple MySQL database Zero-day vulnerabilities published

Researcher discovered Multiple Zero-day vulnerabilities in MySQL database software including Stack based buffer overrun, Heap Based Overrun, Privilege Elevation, Denial of Service and  Remote Preauth User Enumeration.

Common Vulnerabilities and Exposures (CVE) assigned as :
CVE-2012-5611 — MySQL (Linux) Stack based buffer overrun PoC Zeroday
CVE-2012-5612 — MySQL (Linux) Heap Based Overrun PoC Zeroday
CVE-2012-5613 — MySQL (Linux) Database Privilege Elevation Zeroday Exploit
CVE-2012-5614 — MySQL Denial of Service Zeroday PoC
CVE-2012-5615 — MySQL Remote Preauth User Enumeration Zeroday

Currently, all reported bugs are under review and most of the researchers believed that some of these can be duplicate of an existing bugs.

CVE-2012-5612 and CVE-2012-5614 could cause the SQL instance to crash, according to researchers. Where as another interesting bug CVE-2012-5615 allow attacker to find out that either any username exist on the Mysql server or not by reply- "Access denied".

Eric Posted MySQL Database Privilege Elevation 0day Exploit Demo:

source : http://thehackernews.com/2012/12/multiple-mysql-database-zero-day.html

Nmap 6.25 released with 85 new NSE scripts

After five months NMAP team release latest version of open source utility for network exploration or security auditing - NMAP 6.25 .

It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and official binary packages are available for Linux, Windows, and Mac OS X.

Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics.

Updates:

• integration of over 3,000 IPv4 new OS fingerprint submissions, over 1,500 service/version detection fingerprints, and of the latest IPv6 OS submissions and corrections
• better IPv6 traceroute support
• new poll and kqueue I/O engines for improved performance on Windows and BSD-based systems including Mac OS X
• added support for Unix domain sockets
• 85 new NSE scripts
• 12 new protocol libraries
• Windows 8 improvements
• targets-sniffer is now capable of sniffing IPv6 addresses
• a number of bugs affecting the software's security, stability and productiveness fixed.

Download Nmap 6.25

source : http://thehackernews.com/2012/12/nmap-625-released-with-85-new-nse.html

CN-ZINE18 - CODENESIA

Assalamualaikum,wr,wb

Alhamdulilah puji syukur kepada Allah akhirnya codenesia bisa release majalah online lagi
ya CN-ZINE18 dengan tampilan yang "WAW" (sambil koprol3x)
yang pastinya sudah ditunggu2 oleh pembaca setia Codenesia Magazine
Mungkin ini adalah obat dahaga bagi sebagian newbie karena di CN-ZINE18 ini
Dedengkot Echo yaitu om y3dips sebagai target wawancaranya angkat bicara (ciyus miapa?) :p~
Udah ga usah kebanyakan 4l4y dan ga percaya gitu pakai bilang "serius , demi apa" segala? hahaha
kalo ga percaya buktikan sendiri download dan baca !!!


isi artikel CN-ZNE18 diantaranya:
-Wawancara dengan om y3dips tentang "WAJAH HACKERs INDONESIA"
-Brute Force Server with CMD [j0ck3r]
-Trick Bypass Content Filtering Tanpa Proxy dan Tools [X-Cisadane]
-Trick sulap MPC menjadi Ipod [X-Cisadane]
-Bypass Proteksi Password User SmadAv [anharku]
-Crack Windows Xp Sp3 [weduz69]
-Software Pencari Crack [dnz]
-Cheatbook Database for Cheater [DNZ]
-Crack All Deepfreeze [D-Cracker]
-Art of CC [illegal_seller]
-Papercracft Anonymous [Hakz]
-AnonNews
-Info Magazine & Movie
-Windows8 & Ubuntu 12.04[News]
-Progress Codenesia 2012
CN-ZINE18 kali ini agak berbeda dengan CN-ZINE-CN-ZINE sebelumnya
karena desain layout benar2 didesain sedemikian rupa
sehingga tiap halaman memiliki kesan tersendiri dan kaya akan warna.
desain layout satu atau dua halaman untuk satu pokok bahasan
dan juga info2 menarik seputar dunia komputer agar kalian tidak bosan,
dan tidak muntah-muntah karena selalu disodorkan dengan tutorial-tutorial.
Tunggu apalagi donload CN-ZINE18 di link berikut ini:

link muncul setelah kamu login :)
LOGIN FORUM DULU , BARU KE WEBSITE CODENESIA , coz databasenya digabung :)

CN-ZINE18 juga tersedia dalam Versi exe, namun jangan lupa instal Adobe Flash Player dulu biar majalahnya bisa dibuka
http://get.adobe.com/flashplayer/

download CN-ZINE18 exe version di link berikut ini:


semoga bermanfaat.
Wassalammualaikum,wr,wb

Admin

Attachment	Size	Hits	Last download
sc18.rar	55.96 KB	31	6 min 41 sec ago

source : http://codenesia.com/artikel/cn-zine18-issue-wajah-hackers-indonesia-wawancara-dengan-y3dips.aspx