Tools of the Trade - May Contain Peanuts

1) On Jan 17th, Nessus 3.0.5 was released for Windows, Mac OS X, Linux, Solaris and FreeBSD.

This point release provides fixes for multiple minor issues with Nessus 3.0.4. The fixes include:

• Faster startup time, especially on laptops
• Improved the performance of the SYN port scanner
• Fixed a memory leak in the Mac OS X client
• Vista compatibility improved
• Various minor bugs fixed in the NASL engine
• Better chasing of zombie processes

Get more details over at the Tenable Blog.

2) On Jan 17th, NGSSoftware released a new Oracle password whitepaper and OraBrute. OraBrute is a command line tool which will brute force the SYS AS SYSBDA account.

3) Java recently released Java JRE 5.0 Update 10. This update fixes multiple secuirty issues, including the new JRE GIF Image Processing Buffer Overflow Vulnerability.