Network Security Roundup for December 4, 2003

Story Highlights:
"Chris Klaus, the founder and chief technology officer of Internet Security Systems (ISS), was recently appointed to cochair the National Common Criteria Task Force. The task force will examine ways to improve 'common criteria,' a set of software standards developed by a coalition of nations. To hear this insider's perspective on where software security is headed, TechNewsWorld turned to Klaus for an exclusive interview."

Full Story on TechNewsWorld

Silicon.com: Cisco Warns of Aironet WiFi Weak Spot

Story Highlights:
"Cisco Systems is warning of vulnerability in some of its Aironet WiFi access points that could allow attackers to snoop on corporate networks. Vulnerable access points transmit security keys over the air in unencrypted text, meaning that an eavesdropper could intercept them. With the keys, an attacker could easily break the encryption protecting WiFi transmissions."

Full Story on Silicon.com

Story Highlights:
"A security hole in Yahoo's Messenger could allow attackers to run their own code on computers using the program. The buffer overrun vulnerability was found in a file named 'yauto.dll,' which is an ActiveX component of Messenger software versions up to 5.6.0.1347, according to a security alert released by Copenhagen security company Secunia. Yahoo is working to verify the report and develop a patch for Messenger."

Full Story on ComputerWeekly.com

Story Highlights:
"A former employee of American Eagle Outfitters was sentenced to 1-1/2 years in federal prison on Tuesday for posting passwords online to the retailer's Web site and orchestrating an Internet attack. Kenneth Patterson, 38, of Greensburg, must also pay more than $64,000 in restitution as part of his September guilty pleas to password trafficking and computer damage. He could have been sentenced to a maximum 11 years in prison and fined as much as $350,000."

Full Story on Wired News

Story Highlights:
"Accused eBay hacker Jerome Heckenkamp is back in federal court in California this month, but it isn't for his ever-slipping trial date. His attorneys are mounting a constitutional challenge to court-ordered pre-trial restrictions that have kept him from computers and the Internet since his indictment nearly three years ago."

Full Story on SecurityFocus