Sun Jun 2 06:25:45 2024 EVENTS FREE SOFTWARE INSTITUTE POLITICS JOBS MEMBERS' CORNER MAILING LIST NYLXS Members have a lot to say and share but we don't keep many secrets. Join the Hangout Mailing List and say your peice. DATE 2019-01-01 HANGOUT 2024-06-02 | 2024-05-02 | 2024-04-02 | 2024-03-02 | 2024-02-02 | 2024-01-02 | 2023-12-02 | 2023-11-02 | 2023-10-02 | 2023-09-02 | 2023-08-02 | 2023-07-02 | 2023-06-02 | 2023-05-02 | 2023-04-02 | 2023-03-02 | 2023-02-02 | 2023-01-02 | 2022-12-02 | 2022-11-02 | 2022-10-02 | 2022-09-02 | 2022-08-02 | 2022-07-02 | 2022-06-02 | 2022-05-02 | 2022-04-02 | 2022-03-02 | 2022-02-02 | 2022-01-02 | 2021-12-02 | 2021-11-02 | 2021-10-02 | 2021-09-02 | 2021-08-02 | 2021-07-02 | 2021-06-02 | 2021-05-02 | 2021-04-02 | 2021-03-02 | 2021-02-02 | 2021-01-02 | 2020-12-02 | 2020-11-02 | 2020-10-02 | 2020-09-02 | 2020-08-02 | 2020-07-02 | 2020-06-02 | 2020-05-02 | 2020-04-02 | 2020-03-02 | 2020-02-02 | 2020-01-02 | 2019-12-02 | 2019-11-02 | 2019-10-02 | 2019-09-02 | 2019-08-02 | 2019-07-02 | 2019-06-02 | 2019-05-02 | 2019-04-02 | 2019-03-02 | 2019-02-02 | 2019-01-02 | 2018-12-02 | 2018-11-02 | 2018-10-02 | 2018-09-02 | 2018-08-02 | 2018-07-02 | 2018-06-02 | 2018-05-02 | 2018-04-02 | 2018-03-02 | 2018-02-02 | 2018-01-02 | 2017-12-02 | 2017-11-02 | 2017-10-02 | 2017-09-02 | 2017-08-02 | 2017-07-02 | 2017-06-02 | 2017-05-02 | 2017-04-02 | 2017-03-02 | 2017-02-02 | 2017-01-02 | 2016-12-02 | 2016-11-02 | 2016-10-02 | 2016-09-02 | 2016-08-02 | 2016-07-02 | 2016-06-02 | 2016-05-02 | 2016-04-02 | 2016-03-02 | 2016-02-02 | 2016-01-02 | 2015-12-02 | 2015-11-02 | 2015-10-02 | 2015-09-02 | 2015-08-02 | 2015-07-02 | 2015-06-02 | 2015-05-02 | 2015-04-02 | 2015-03-02 | 2015-02-02 | 2015-01-02 | 2014-12-02 | 2014-11-02 | 2014-10-02 | 2014-09-02 | 2014-08-02 | 2014-07-02 | 2014-06-02 | 2014-05-02 | 2014-04-02 | 2014-03-02 | 2014-02-02 | 2014-01-02 | 2013-12-02 | 2013-11-02 | 2013-10-02 | 2013-09-02 | 2013-08-02 | 2013-07-02 | 2013-06-02 | 2013-05-02 | 2013-04-02 | 2013-03-02 | 2013-02-02 | 2013-01-02 | 2012-12-02 | 2012-11-02 | 2012-10-02 | 2012-09-02 | 2012-08-02 | 2012-07-02 | 2012-06-02 | 2012-05-02 | 2012-04-02 | 2012-03-02 | 2012-02-02 | 2012-01-02 | 2011-12-02 | 2011-11-02 | 2011-10-02 | 2011-09-02 | 2011-08-02 | 2011-07-02 | 2011-06-02 | 2011-05-02 | 2011-04-02 | 2011-03-02 | 2011-02-02 | 2011-01-02 | 2010-12-02 | 2010-11-02 | 2010-10-02 | 2010-09-02 | 2010-08-02 | 2010-07-02 | 2010-06-02 | 2010-05-02 | 2010-04-02 | 2010-03-02 | 2010-02-02 | 2010-01-02 | 2009-12-02 | 2009-11-02 | 2009-10-02 | 2009-09-02 | 2009-08-02 | 2009-07-02 | 2009-06-02 | 2009-05-02 | 2009-04-02 | 2009-03-02 | 2009-02-02 | 2009-01-02 | 2008-12-02 | 2008-11-02 | 2008-10-02 | 2008-09-02 | 2008-08-02 | 2008-07-02 | 2008-06-02 | 2008-05-02 | 2008-04-02 | 2008-03-02 | 2008-02-02 | 2008-01-02 | 2007-12-02 | 2007-11-02 | 2007-10-02 | 2007-09-02 | 2007-08-02 | 2007-07-02 | 2007-06-02 | 2007-05-02 | 2007-04-02 | 2007-03-02 | 2007-02-02 | 2007-01-02 | 2006-12-02 | 2006-11-02 | 2006-10-02 | 2006-09-02 | 2006-08-02 | 2006-07-02 | 2006-06-02 | 2006-05-02 | 2006-04-02 | 2006-03-02 | 2006-02-02 | 2006-01-02 | 2005-12-02 | 2005-11-02 | 2005-10-02 | 2005-09-02 | 2005-08-02 | 2005-07-02 | 2005-06-02 | 2005-05-02 | 2005-04-02 | 2005-03-02 | 2005-02-02 | 2005-01-02 | 2004-12-02 | 2004-11-02 | 2004-10-02 | 2004-09-02 | 2004-08-02 | 2004-07-02 | 2004-06-02 | 2004-05-02 | 2004-04-02 | 2004-03-02 | 2004-02-02 | 2004-01-02 | 2003-12-02 | 2003-11-02 | 2003-10-02 | 2003-09-02 | 2003-08-02 | 2003-07-02 | 2003-06-02 | 2003-05-02 | 2003-04-02 | 2003-03-02 | 2003-02-02 | 2003-01-02 | 2002-12-02 | 2002-11-02 | 2002-10-02 | 2002-09-02 | 2002-08-02 | 2002-07-02 | 2002-06-02 | 2002-05-02 | 2002-04-02 | 2002-03-02 | 2002-02-02 | 2002-01-02 | 2001-12-02 | 2001-11-02 | 2001-10-02 | 2001-09-02 | 2001-08-02 | 2001-07-02 | 2001-06-02 | 2001-05-02 | 2001-04-02 | 2001-03-02 | 2001-02-02 | 2001-01-02 | 2000-12-02 | 2000-11-02 | 2000-10-02 | 2000-09-02 | 2000-08-02 | 2000-07-02 | 2000-06-02 | 2000-05-02 | 2000-04-02 | 2000-03-02 | 2000-02-02 | 2000-01-02 | 1999-12-02 Key: Value: Key: Value: MESSAGE DATE 2019-01-15 FROM Ruben Safir SUBJECT Subject: [Hangout - NYLXS] Modperl security alert CVE-2011-2767 Detail Current Description mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no configuration option that permits Perl code for the administrator's control of HTTP request processing without also permitting unprivileged users to run Perl code in the context of the user account that runs Apache HTTP Server processes. Source: MITRE Description Last Modified: 08/26/2018 View Analysis Description Impact CVSS v3.0 Severity and Metrics: Base Score: 9.8 CRITICAL Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (V3 legend) Impact Score: 5.9 Exploitability Score: 3.9 Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None Scope (S): Unchanged Confidentiality (C): High Integrity (I): High Availability (A): High CVSS v2.0 Severity and Metrics: Base Score: 10.0 HIGH Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C) (V2 legend) Impact Subscore: 10.0 Exploitability Subscore: 10.0 Access Vector (AV): Network Access Complexity (AC): Low Authentication (AU): None Confidentiality (C): Complete Integrity (I): Complete Availability (A): Complete Additional Information: Allows unauthorized disclosure of information Allows unauthorized modification Allows disruption of service References to Advisories, Solutions, and Tools By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd-at-nist.gov. Hyperlink Resource http://www.securityfocus.com/bid/105195 Third Party Advisory VDB Entry https://access.redhat.com/errata/RHSA-2018:2737 Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2825 Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2826 Third Party Advisory https://bugs.debian.org/644169 Issue Tracking Mailing List Third Party Advisory https://lists.debian.org/debian-lts-announce/2018/09/msg00018.html Mailing List Third Party Advisory https://mail-archives.apache.org/mod_mbox/perl-modperl/201110.mbox/raw/%3C20111004084343.GA21290%40ktnx.net%3E Mailing List Third Party Advisory https://usn.ubuntu.com/3825-1/ Third Party Advisory https://usn.ubuntu.com/3825-2/ Third Party Advisory Technical Details Vulnerability Type (View All) Code Injection (CWE-94) Vulnerable software and versions Switch to CPE 2.2 Configuration 1 OR cpe:2.3:a:apache:mod_perl:*:*:*:*:*:*:*:* versions from (including) 2.0.0 up to (including) 2.0.10 Configuration 2 OR cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Configuration 3 OR cpe:2.3:o:redhat:enterprise_linux:6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Configuration 4 OR cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:* Denotes Vulnerable Software Are we missing a CPE here? Please let us know. Change History -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 _______________________________________________ Hangout mailing list Hangout-at-nylxs.com http://lists.mrbrklyn.com/mailman/listinfo/hangout 2019-01-02 From: "IEEE Spectrum University Spotlight" <reply-at-media.ieee.org> Subject: [Hangout - NYLXS] Latest in Continuing Education Programs, Degrees, 2019-01-02 From: "Free Software Foundation" <info-at-fsf.org> Subject: [Hangout - NYLXS] Free Software Supporter Issue 129, January 2019 2019-01-05 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Anyone up for a trip to the Met, 2019-01-07 James E Keenan <jkeenan-at-pobox.com> Subject: [Hangout - NYLXS] First social meeting of 2019: Monday Jan 14 at 2019-01-07 James E Keenan <jkeenan-at-pobox.com> Subject: [Hangout - NYLXS] First social meeting of 2019: Monday Jan 14 at 2019-01-08 James E Keenan <jkeenan-at-pobox.com> Subject: [Hangout - NYLXS] Request help getting article from IEEE 2019-01-07 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #389 - Welcome to 2019! What are 2019-01-03 From: "IEEE Spectrum Tech Alert" <reply-at-media.ieee.org> Subject: [Hangout - NYLXS] Consumer Electronics Hall of Fame and 2018's 2019-01-03 From: "American Museum of Natural History" <learn-at-amnh.org> Subject: [Hangout - NYLXS] Register for Our Spring Session 1 Courses for 2019-01-09 Ruben Safir <ruben.safir-at-my.liu.edu> Subject: [Hangout - NYLXS] Fwd: Resource Control -at- Facebook on Thursday, 2019-01-11 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Copyright Wars 2019-01-11 From: "Ruben.Safir" <ruben.safir-at-my.liu.edu> Subject: [Hangout - NYLXS] Fwd: New York Artificial Intelligence In 2019-01-03 From: "IEEE Spectrum Tech Alert" <reply-at-media.ieee.org> Subject: [Hangout - NYLXS] Hi Ruben, what do you think? 2019-01-13 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #390 - It is time for Perl Conference 2019-01-13 James E Keenan <jkeenan-at-pobox.com> Re: [Hangout - NYLXS] Request help getting article from IEEE 2019-01-13 Devin Heitmueller <devin.heitmueller-at-gmail.com> Re: [Hangout - NYLXS] Request help getting article from IEEE 2019-01-13 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #390 - It is time for Perl Conference 2019-01-14 From: "Pat Schloss" <pschloss-at-umich.edu> Subject: [Hangout - NYLXS] [mothur] Upcoming mothur workshops 2019-01-14 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Fwd: [mothur] Upcoming mothur workshops 2019-01-14 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Meeting this week 2019-01-15 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] 3d imagine for Paleontological specimens 2019-01-15 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Modperl security alert 2019-01-15 From: "Mancini, Sabin (DFS)" <Sabin.Mancini-at-dfs.ny.gov> Re: [Hangout - NYLXS] Meeting this week | | Why not meet Thursday 2019-01-15 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Fwd: RSVP to Free Blue Note Show! Plus Eddie 2019-01-17 Ruben Safir <mrbrklyn-at-panix.com> Re: [Hangout - NYLXS] Meeting this week | | Why not meet Thursday 2019-01-17 From: "Mancini, Sabin (DFS)" <Sabin.Mancini-at-dfs.ny.gov> Re: [Hangout - NYLXS] Meeting this week | | Why not meet Thursday 2019-01-17 From: "Deutsch, Chaim" <CDeutsch-at-council.nyc.gov> Subject: [Hangout - NYLXS] THE DEUTSCH REPORT: News From Councilmember Chaim 2019-01-21 Ruben Safir <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Documentaries 2019-01-22 Ruben Safir <ruben.safir-at-my.liu.edu> Subject: [Hangout - NYLXS] New York Artificial Intelligence In Healthcare 2019-01-22 Ruben Safir <ruben-at-mrbrklyn.com> Re: [Hangout - NYLXS] Meeting this week | | Why not meet Thursday 2019-01-18 From: "American Museum of Natural History" <fieldtrips-at-amnh.org> Subject: [Hangout - NYLXS] Upcoming Professional Opportunities at the Museum 2019-01-21 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #391 - Serverless Perl 2019-01-20 James E Keenan <jkeenan-at-pobox.com> Subject: [Hangout - NYLXS] Presentations requested for ny.pm technical 2019-01-22 DCAS <MyNYC-at-nyc.gov> Subject: [Hangout - NYLXS] REMINDER: Changes to Your OASys Account 2019-01-23 ruben <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Fwd: Two ways to Refigure the Future with Eyebeam 2019-01-22 From: "IEEE The Institute Alert" <reply-at-media.ieee.org> Subject: [Hangout - NYLXS] =?utf-8?q?U=2ES=2E_Judge_Rules_Mats_J=C3=A4rlst?= 2019-01-23 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Community Pharmacy is being destroyed by the PBMs 2019-01-24 Ruben Safir <ruben-at-mrbrklyn.com> Re: [Hangout - NYLXS] Community Pharmacy is being destroyed by the 2019-01-24 From: "SUSE" <events-at-suse.com> Subject: [Hangout - NYLXS] SUSECON: The Best Open Source Conference Value in 2019-01-25 Ruben Safir <ruben-at-mrbrklyn.com> Re: [Hangout - NYLXS] Community Pharmacy is being destroyed by the 2019-01-24 Healthcare Update News Service <admin-at-healthcareupdatenewsservice.com> Subject: [Hangout - NYLXS] Health Datapalooza: Hear Directly From Health 2019-01-25 Stephan Bosch <stephan-at-rename-it.nl> Re: [Hangout - NYLXS] problem in setting up proxy 2019-01-26 Ruben Safir <mrbrklyn-at-panix.com> Re: [Hangout - NYLXS] Community Pharmacy is being destroyed by the 2019-01-28 Gabor Szabo <gabor-at-szabgab.com> Subject: [Hangout - NYLXS] [Perlweekly] #392 - Time to submit talk/workshop 2019-01-28 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Libre Planet in Boston 2019-01-28 Ruben Safir <ruben-at-mrbrklyn.com> Re: [Hangout - NYLXS] Community Pharmacy is being destroyed by the 2019-01-29 mrbrklyn <mrbrklyn-at-panix.com> Subject: [Hangout - NYLXS] Fwd: New York University Special Invite: HireNYC 2019-01-28 From: "HireNYC 2019 Alumni Career Fair" <jesse-at-gohiretalent.net> Subject: [Hangout - NYLXS] New York University Special Invite: HireNYC 2019 2019-01-31 Ruben Safir <ruben-at-mrbrklyn.com> Subject: [Hangout - NYLXS] Community Pharmacy is being destroyed by the PBMs 2019-01-31 From: "IEEE Spectrum Tech Alert" <reply-at-media.ieee.org> Subject: [Hangout - NYLXS] 3D Printing: New Technique Turns Out Objects 100 2019-01-31 From: "American Museum of Natural History" <learn-at-amnh.org> Subject: [Hangout - NYLXS] Take a Peek at Our Next Session's Courses! NYLXS are Do'ers and the first step of Doing is Joining! Join NYLXS and make a difference in your community today!