[security bulletin] HPSBPI02807 SSRT100928 rev.1 - HP LaserJet Pro 400 Multi Function Printers, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03464042 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03464042 Version: 1 HPSBPI02807...

CVE-2012-3273

CVE-2012-3273 affects HP LaserJet Pro 400 MFP M425 (firmware 20120625) and LaserJet Pro 400 M401 (firmware 20120621). The HP Security Bulletin notes multiple unspecified vulnerabilities that could be remotely exploited to obtain sensitive information and allow remote unauthorized access. Affected...

400 million new variants of malware created in a year

Symantec provide overview and analysis of the year in global threat activity via its Internet Security Threat Report ISTR, with a exclusive details that 400 million new variants of malware were created in 2011, which is an average of 33 million new variants of malware a month, or an average of on...

HPSBPI02807 SSRT100928 rev.2 - HP LaserJet Pro 400 Multi Function Printers, Remote Unauthorized Access

Potential Security Impact Remote unauthorized access VULNERABILITY SUMMARY Potential security vulnerabilities have been identified with certain HP LaserJet Pro 400 Multifunction Printers MFP. The vulnerabilities could be remotely exploited to allow unauthorized access. RESOLUTION HP has provided...

Scientific Linux Security Update : ruby on SL5.x i386/x86_64

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks. A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker coul...

CVE-2012-3016

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets...

CVE-2012-3017

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets...

Code injection

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets...

Code injection

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets...

CVE-2012-3017

Siemens SIMATIC S7-400 PN CPU devices with firmware 5.x allow remote attackers to cause a denial of service defect-mode transition and service outage via 1 malformed HTTP traffic or 2 malformed IP packets...

CVE-2012-3016

The vulnerability CVE-2012-3016 affects Siemens SIMATIC S7-400 PN CPU devices running firmware 6 up to (but not including) 6.0.3. It allows remote attackers to cause a DoS by sending crafted ICMP packets, potentially forcing the PLC into defect mode with a manual reset needed to restore operation...

CVE-2012-3016

Siemens SIMATIC S7-400 PN CPU devices with firmware 6 before 6.0.3 allow remote attackers to cause a denial of service defect-mode transition and service outage via crafted ICMP packets...

CVE-2012-3017

Summary: CVE-2012-3017 affects Siemens SIMATIC S7-400 PN CPU devices running firmware 5.x. The vulnerability allows remote attackers to trigger a denial of service (defect-mode transition and service outage) by sending malformed HTTP traffic or malformed IP packets. The publicly provided document...

Siemens Simatic S7-300/400 CPU START/STOP Module

Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-300/400 CPU START/STOP Module',...

Siemens Simatic S7-300400 - CPU STARTSTOP Module (Metasploit)

Siemens Simatic S7-300400 - CPU STARTSTOP Module Metasploit Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3...

Siemens Simatic S7-300/400 - CPU START/STOP Module (Metasploit)

Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3 'Siemens Simatic S7-300/400 CPU START/STOP Module',...

Siemens Simatic S7-300/400 CPU START/STOP Module

Exploit for hardware platform in category remote exploits Exploit Title: Siemens Simatic S7 300/400 CPU command module Date: 7-13-2012 Exploit Author: Dillon Beresford Vendor Homepage: http://www.siemens.com/ Tested on: Siemens Simatic S7-300 PLC CVE : None require 'msf/core' class Metasploit3...

Report: TeamP0ison Hacker "TriCk" Pleads Guilty For Hacking Tony Blair's E-mail

TeamP0ison hacker and newly minted 18 year-old Junaid Hussain of Birmingham, England – a.k.a “TriCk” pleaded guilty last week to hacking charges for a string of attacks on some of the U.K.’s leading political figures, including former Prime Minister Tony Blair, according to a published report in...

Apache HTTPD Error Code 400 httpOnly Cookie Handling Information Disclosure (CVE-2012-0053)

An information disclosure vulnerability has been reported in Apache HTTPD server...

Apache HTTPD Error Code 400 httpOnly Cookie Handling Information Disclosure - ver 2 (CVE-2012-0053)

An information disclosure vulnerability has been reported in Apache HTTPD server. The vulnerability is due to an error while creating the default HTTP 400 error page. A remote attacker can exploit this vulnerability by causing the target user's browser to send crafted HTTP requests to the...