<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>OpenKB::Server Technical Papers &#187; Security</title>
	<atom:link href="http://www.openkb.org/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.openkb.org</link>
	<description>Computer , server issues and solutions</description>
	<lastBuildDate>Thu, 02 Feb 2012 16:50:15 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Whitehouse on Cybersecurity</title>
		<link>http://www.openkb.org/whitehouse-on-cybersecurity/</link>
		<comments>http://www.openkb.org/whitehouse-on-cybersecurity/#comments</comments>
		<pubDate>Tue, 04 Oct 2011 10:55:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.openkb.org/?p=1045</guid>
		<description><![CDATA[President Obama has declared that the “cyber threat is one of the most serious economic and national security challenges we face as a nation” and that “America&#8217;s economic prosperity in the 21st century will depend on cybersecurity.”]]></description>
			<content:encoded><![CDATA[<p><object width="480" height="300"><param name="movie" value="http://www.whitehouse.gov/sites/all/modules/swftools/shared/flash_media_player/player5x2.swf"></param><param name="allowFullScreen" value="true"></param><param name="bgcolor" value="282828"></param><param name="allowscriptaccess" value="always"></param><param name="flashvars" value="config=http://www.whitehouse.gov/xml/video/4230/config.xml&#038;path_to_plugins=http://www.whitehouse.gov/sites/default/modules/wh_multimedia/wh_jwplayer/plugins&#038;path_to_player=http://www.whitehouse.gov/sites/all/modules/swftools/shared/flash_media_player/player5x2.swf"></param><embed src="http://www.whitehouse.gov/sites/all/modules/swftools/shared/flash_media_player/player5x2.swf" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="480" height="300" flashvars="config=http://www.whitehouse.gov/xml/video/4230/config.xml&#038;path_to_plugins=http://www.whitehouse.gov/sites/default/modules/wh_multimedia/wh_jwplayer/plugins&#038;path_to_player=http://www.whitehouse.gov/sites/all/modules/swftools/shared/flash_media_player/player5x2.swf&#038;share_url=http://www.whitehouse.gov/video/President-Obama-on-Cybersecurity"></embed></object></p>
<p>President Obama has declared that the “cyber threat is one of the most serious economic and national security challenges we face as a nation” and that “America&#8217;s economic prosperity in the 21st century will depend on cybersecurity.”</p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/whitehouse-on-cybersecurity/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Apple released a update that will block Jailbreakme.com</title>
		<link>http://www.openkb.org/apple-released-a-update-that-will-block-jailbreakme-com/</link>
		<comments>http://www.openkb.org/apple-released-a-update-that-will-block-jailbreakme-com/#comments</comments>
		<pubDate>Mon, 18 Jul 2011 06:54:10 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.openkb.org/?p=996</guid>
		<description><![CDATA[so for now , Jailbreakme.com will not work on your device if you have updated to the latest version. I am sure they will find another way. Patch will resolve the following CoreGraphics (CVE-2010-3855) – Viewing a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution Description: A buffer [...]]]></description>
			<content:encoded><![CDATA[<p>so for now , Jailbreakme.com will not work on your device if you have updated to the latest version. I am sure they will find another way. </p>
<p>Patch will resolve the following</p>
<p>CoreGraphics (CVE-2010-3855) – Viewing a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow exists in FreeType’s handling of TrueType fonts.<br />
CoreGraphics (CVE-2011-0226) – Viewing a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution Description: A signedness issue exists in FreeType’s handling of Type 1 fonts.<br />
IOMobileFrameBuffer (CVE-2011-0227) – Malicious code running as the user may gain system privileges. An invalid type conversion issue exists in the use of IOMobileFrameBuffer queueing primitives, which may allow malicious code running as the user to gain system privileges.</p>
<p>The iOs 4.3.4 update is available for iOS 3.0 through 4.3.3 for iPhone 3GS and iPhone 4 (GSM); iOS 3.1 through 4.3.3 for iPod touch (3rd generation) and later; and iOS 3.2 through 4.3.3 for iPad.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/apple-released-a-update-that-will-block-jailbreakme-com/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Task Manager: spyware disabled the task manager</title>
		<link>http://www.openkb.org/task-manager-spyware-disabled-the-task-manager/</link>
		<comments>http://www.openkb.org/task-manager-spyware-disabled-the-task-manager/#comments</comments>
		<pubDate>Thu, 13 Aug 2009 04:41:21 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://www.openkb.org/?p=563</guid>
		<description><![CDATA[Error: unable to view the task manager after some malicous code was installed .. You can reenable the task manager via the registry *do not attempt to do this unless you know what you are doing. I will not be held responsible for you damaging your system.when in doubt consult a computer tech* Hive: HKEY_CURRENT_USER [...]]]></description>
			<content:encoded><![CDATA[<p>Error: unable to view the task manager after some malicous code was installed .. </p>
<p>You can reenable the task manager via the registry<br />
*do not attempt to do this unless you know what you are doing. I will not be held responsible for you damaging your system.when in doubt consult a computer tech*</p>
<p>Hive: HKEY_CURRENT_USER<br />
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System<br />
Name: DisableTaskMgr<br />
Type: REG_DWORD<br />
Value: 1=Enablethis key, that is DISABLE TaskManager<br />
Value: 0=Disablethis key, that is Don&#8217;t Disable, Enable TaskManager</p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/task-manager-spyware-disabled-the-task-manager/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WordPress Security-parse error. not well formed- spam</title>
		<link>http://www.openkb.org/wordpress-security-parse-error-not-well-formed/</link>
		<comments>http://www.openkb.org/wordpress-security-parse-error-not-well-formed/#comments</comments>
		<pubDate>Sun, 12 Jul 2009 18:23:13 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.openkb.org/?p=518</guid>
		<description><![CDATA[This caught me by surprise when I ran across this information. There seems to be a exploit in some version of wordpress. The exploit from what I have seen is caused by users using a remote site to post to their blog. view the blog content using google Reader or via curl will display the [...]]]></description>
			<content:encoded><![CDATA[<p>This caught me by surprise when I ran across this information.  There seems to be a exploit in some version of wordpress. The exploit from what I have seen is caused by users using a remote site to post to their blog.</p>
<p>view the blog content using google Reader or via curl will display the spam content<br />
<code> curl --no-sessionid --user-agent "Googlebot/2.1 (+http://www.googlebot.com/bot.html)" http://www.example.com</code></p>
<p>Such sites include windows live writer.<br />
I would recommend taking a look at the wordpress users that are setup on your site . Verify that only approved users have administrative rights. also compare your existing files with the files from the installation zip from wordpress.com ..</p>
<p>The key file is xmlrpc.php<br />
if you see this on line 27 , then you have a huge problem<br />
$HTTP_RAW_POST_DATA = mysql_escape_string(trim($HTTP_RAW_POST_DATA));<br />
<a href="http://eric.clst.org/mystery/archives/693"> research1 </a><br />
<a href="http://wordpress.org/support/topic/168964?replies=46"> research2 </a><br />
<a href="http://social.microsoft.com/Forums/en-US/writergeneral/thread/9e64e85e-b4af-4919-b75d-79bd8ce1cbce"> Straight to the point </a></p>
<p>Possible error you may see<br />
log Server Error<br />
Server Error -32700 Occurred<br />
parse error. not well formed</p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/wordpress-security-parse-error-not-well-formed/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ALL: Disable SSLV2 -PCI Compliance</title>
		<link>http://www.openkb.org/all-disable-sslv2-pci-compliance/</link>
		<comments>http://www.openkb.org/all-disable-sslv2-pci-compliance/#comments</comments>
		<pubDate>Sun, 01 Mar 2009 20:27:35 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.openkb.org/?p=392</guid>
		<description><![CDATA[To disable SSLv2 server-wide add this in your ssl.conf: SSLProtocol all -SSLv2 SSLCipherSuite ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM or ALL:!ADH:!NULL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:-LOW:+SSLv3:+TLSv1:-SSLv2:+EXP:+eNULL Test using the following command via linux openssl s_client -host (host-ip) -port 443 -verify -debug -ssl2 you can also try curl &#8211;cipher SSLv2 domain.com:443 openssl s_client -connect domain:443 -state openssl s_client -connect domain:443 -sslv2 *change (host-ip) with the domain [...]]]></description>
			<content:encoded><![CDATA[<p>To disable SSLv2 server-wide add this in your ssl.conf:<br />
SSLProtocol all -SSLv2<br />
SSLCipherSuite ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM<br />
or ALL:!ADH:!NULL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:-LOW:+SSLv3:+TLSv1:-SSLv2:+EXP:+eNULL</p>
<p>Test using the following command via linux<br />
 openssl s_client -host (host-ip) -port 443 -verify -debug -ssl2</p>
<p>you can also try </p>
<p> curl &#8211;cipher SSLv2 domain.com:443</p>
<p> openssl s_client -connect domain:443 -state</p>
<p>openssl s_client -connect domain:443 -sslv2</p>
<p>*change (host-ip) with the domain name or the server ip address </p>
<p>if SSL2 is disable<br />
You should see an output similar to this if its disabled:<br />
verify depth is 0<br />
CONNECTED(00000003)<br />
4738:error:1407F0E5:SSL routines:SSL2_WRITE:ssl handshake failure:s2_pkt.c:429:<br />
or<br />
verify depth is 0<br />
CONNECTED(00000003)<br />
write:errno=104<br />
=======================<br />
enabling only strong ciphers in <a href="http://httpd.apache.org/docs/2.0/ssl/ssl_howto.html#onlystrong">apache </a></p>
<p>Good tool to check <a href="http://packetstorm.linuxsecurity.com/crypt/SSL/sslthing.tgz">SSL ciphers</a></p>
<p><a href="http://blog.techstacks.com/2009/01/verifying-ssl-ciphers.html">Reference site </a></p>
<p>=========</p>
<p>Cpanel:<br />
The SSLCipherSuite can be customized in cPanel/WHM 11.24 by going to WHM -> Service Configuration -> Apache Configuration -> Global Configuration. This is the place where you can disable SSL 2.0 support if you desire. Click the &#8220;more info&#8221; link on that page for more info.</p>
<p><a href="http://www.ehow.com/how_4397598_disable-ssl-v-pci-compliance.html"> Reference 1</a></p>
<p><a href="http://rackerhacker.com/2007/02/27/disabling-sslv2-in-plesk/">Reference 2 </a><br />
<a href="http://www.transcendlinux.com/disabling-sslv2"> Reference 3 </a><br />
<a href="http://support.microsoft.com/?id=187498"> Disable sslv2 on windows </a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.openkb.org/all-disable-sslv2-pci-compliance/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

