heise online news 31/12/2008

heise online news 31/12/2008 www.heise-online.co.uk Overview of the news from the past 24 hours heise online news 25C3: MD5 collisions crack CA certificate Researchers have created a rogue CA certificate using a combination of MD5 collision attacks and weaknesses in CA certificate issuing. The technique could allow for "practically undetectable phishing attacks" › Read article     25C3: Serious security vulnerabilities in DECT wireless telephony Simple hardware is all that's required to eavesdrop on DECT telephone calls › Read article     25C3: More light shed on "denial of service" vulnerabilities in TCP Reports of the vulnerability to DoS attacks of the fundamental internet protocol have been going the rounds since the autumn. At the 25C3 hacker congress in Berlin a security expert presented credible scenarios and tips for dealing with the problem › Read article     25C3: Reliable exploits for Cisco routers At the CCC Congress, Felix "FX" Lindner of Phenoelit gave the first public presentation of a technique for reliably exploiting buffer overflows in Cisco routers › Read article     Microsoft refutes Media Player vulnerability Microsoft refute the report of a vulnerability in Windows Media Player, saying there was no chance of code execution and that it had already found the bug › Read article     This newsletter is sent to in a multipart format. If you want to read it as plain text, you will have to change the display mode of your e-mail program. You are receiving heise online news because you subscribed at our website. If you no longer wish to receive the newsletter, you can cancel your subscription at http://www.heise-online.co.uk/newsletter/manage/news. For more news from the world of technology, subscribe to our other newsletters: Newsletter heise open source: All the latest about Free and Open Source software from heise online, including news, features, analysis and case studies. www.heise-online.co.uk/newsletter/manage/open Newsletter heise Security: IT security news and alerts to keep your systems secure, with features giving an in-depth look at the world of IT security. www.heise-online.co.uk/newsletter/manage/security Newsletter heise networks features: In-depth articles, tools and techniques for networking and communications. www.heise-online.co.uk/newsletter/manage/networks Legal notice Publishers: Christian Heise, Ansgar Heise, Christian Persson Editor-in-chief: Jonathan Bennett All rights reserved. Any copies or dissemination on any medium, either in part of whole, requires the written consent of the publisher. Copyright (c) 2008 Heise Media UK Ltd.