Perl MIME Boundary 'multipart_init' Unspecified Security Vulnerability

Perl is prone to an unspecified security vulnerability because the MIME part of the 'multipartinit' is not random. OpenVAS Vulnerability Test $Id: gbperlcgi44892.nasl 5323 2017-02-17 08:49:23Z teissa $ Perl MIME Boundary 'multipartinit' Unspecified Security Vulnerability Authors: Michael Meyer...

kernel: net/sched/act_police.c infoleak

The tcfactpolicedump function in net/sched/actpolice.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel...

UK: Google Street View Data Snarfing Broke the Law

Search giant Google violated the United Kingdom’s Data Protection Act by gobbling up personal data, in addition to images and GPS data, with its roving Street View autos. According to a report by the BBC, the UK’s Information Commissioner ruled there was a “significant breach” of the country’s da...

Cyber Stalking and Defamation Criminalized in IT Act Amendments

With mobile phones now essentially serving as personal computers, proposed amendments to the Information Technology Act, 2006, specify that transmitting offensive or menacing text, audio, or video can result in two years of imprisonment. This punishment also applies if the content is false and...

kernel: net/sched/act_police.c infoleak

The tcfactpolicedump function in net/sched/actpolice.c in the actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc4 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel...

New Jailbreak Could Defy Patching on iPhones, iPads

Code that allows Apple customers to circumvent that company’s exclusive content protection features was released on Wednesday, with security researchers warning that the hack could be impossible for Apple to fix on devices that have already been manufactured. The Chronic Development Team, a group...

CVE-2010-1552: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the act and app parameters...

Andy Jaquith on Measuring Meaningful Information Security Metrics

The March issue of Information Security magazine is out this week. The cover story is a look at how security information management systems need to evolve, in particular by integrating identity management with SIM in order to tie policy violations to user activity. Also, expert Andrew Jaquith...

CVE-2009-4364: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in ScriptsEz Ez Blog allows remote attackers to inject arbitrary web script or HTML via the cname parameter, related to the act and id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

The Story of the First Internet Worm

Robert Tappan Morris was the first person convicted by a jury under the Computer Fraud and Abuse Act of 1986. The story of the worm he created and what happened to him after it was released is a tale of mistakes, infamy, and ultimately the financial and professional success of its author. Read th...

Court Rules in Favor of Kaspersky in Filtering Case

From Wired David Kravets A federal appeals court, in the first decision of its kind, said Thursday that companies providing malware, spyware and adware blocking services are immunized by the Communications Decency Act of 1996 from lawsuits claiming unfair business practices. A three-judge panel o...

Canadian Parliament considers anti-malware law

From Stop Badware Maxim Weinstein The Canadian House of Commons is considering bill C-27 gc.ca, the Electronic Commerce Protection Act. In addition to providing civil penalties for unsolicited commercial e-mail spam and the unauthorized interception of e-mail man in the middle attacks, it provide...

Bad outweighs the good in Senate cybersecurity bill

The Senate bill introduced earlier this month that would make sweeping changes to the way that information security is practiced both in the federal government and the private sector has a number of good elements, but the flaws in the proposed legislation outweight the benefits, writes Steve...

phpOCS <= 0.1-beta3 (index.php act) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== phpOCS = 0.1-beta3 index.php act Local File Inclusion Vulnerability ====================================================================== :::::::-. ... ::::::. :::. ;;...

Unfixed XSS vulnerability at bec.msoe.edu

Security researcher PaPPy, has submitted on 07/05/2008 a cross-site-scripting XSS vulnerability affecting bec.msoe.edu, which at the time of submission ranked 56477 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/05/2008. It is currently...

Joomla Component Acajoom (com_acajoom) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Joomla Component Acajoom comacajoom SQL Injection Vulnerability ================================================================== Joomla Component comacajoom SQL Injection...

CVE-2007-6552

Directory traversal vulnerability in index.php in AuraCMS 2.2 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the act parameter, possibly involving the news pilih component; as demonstrated by including admin/adminusers.php to bypass a protection...

HP-UX Security Patch : PHSS_30204

X OV ITO7.1X Msg/Act Linux Agent A.07.23 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26687; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_31006

X OV ITO7.1X Msg/Act Linux Agent A.07.25 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26719; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

HP-UX Security Patch : PHSS_29643

X OV ITO7.1X Msg/Act Linux Agent A.07.22 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid26675; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...