Sans Vulnerabilities List: Q1 2005

First look at the summary of Sans Vulns list: Q1 2005 (SVL:Q1-05), is not very surprising to have MS to fill up the list.

Top New Vulnerabilities in Q1, 2005 (Summary List)

Microsoft Products

* Windows License Logging Service Overflow (MS05-010)
* Microsoft Server Message Block(SMB) Vulnerability (MS05-011)
* Internet Explorer Vulnerabilities (MS05-014 and MS05-008)
* Microsoft HTML Help ActiveX Control Vulnerability (MS05-001)
* Microsoft DHTML Edit ActiveX Remote Code Execution (MS05-013)
* Microsoft Cursor and Icon Handling Overflow (MS05-002)
* Microsoft PNG File Processing Vulnerabilities (MS05-009)

Computer Associates License Manager Buffer Overflows
DNS Cache Poisoning Vulnerability
Multiple Antivirus Products Buffer Overflow Vulnerabilities
Oracle Critical Patch Update
Multiple Media Player Buffer Overflows (RealPlayer, Winamp and iTunes)

Upgrading my Thinkpad HD

Been off a while from the world while i was upgrading my thinkpad HD from 30GB to 80GB.

I’ve been looking for 80GB Hitachi but no luck, So I think I’ll go with Samsung as the shop recommends it. It cost less about 100 compared to Hitachi HD.

My old 30GB HD paritioned into 3 filesystem, NTFS, FAT32, and Ext3.

The first time I tought I would do all of the data migration using ‘dd’ command from knoppix CD. However, some sources from the net do not recommend that as it has different disk size (and geometry).

But I did try, $ dd if=/dev/source of=/dev/dest. Voila!, it takes about 1 day to transfer about 9GB, and I still have lots of Gigs to go. I think it’s because of the USB-HD problem with low transfer rate, Duh.

then I tried the old way, manual copying. I partition my new HD, boot knoppix, and copy the linux partition.

# fdisk /dev/hda

# make2fs -jv /dev/hda

# e2fsck -cv /dev/hda

# cp -Rvp /dev/source /dev/target

Well, it worked for Linux (and friends), fat32 partitions. Everything seems fine. Including the permissions label for files as I use parameter “-p” for “cp” program.

Now, I’m enjoying my Linux with big HD but still have to have wait to transfer my winxp (NTFS) to my new HD. I heard about captive ntfs, but still not convinced as I tried Norton Ghost and it didn’t work.

Wait, Thinkpad Recovery partition? I have no idea how to transfer it.