1008 matches found
A week in security (Jun 12 – Jun 18)
Last week was very busy for the Labs, with a look at so-called numeric tech support scams, a visit to the huge Infosec Europe conference, an exploration of Mac Malware as a Service, and a walk through the myths of online bullying. Elsewhere: A huge click-farm is busted Jaff Ransomware is thwarted...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 1, 2017
As you read this blog, I am probably sitting on a beach in Cancun, Mexico getting a nice tan and not thinking about security well, maybe just a little. A couple of days before I left, I had to deal with the inevitable. It never fails – every time I am about to go on vacation, the urgency of thing...
GMV Checker ATM Security Arbitrary Code Execution Vulnerability
GMV Checker ATM Security is a dedicated ATM security product providing hard disk encryption. A security vulnerability exists in versions prior to GMV Checker ATM Security 5.0.18. A remote attacker can exploit the vulnerability to execute arbitrary code...
Code injection
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...
CVE-2017-6968
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...
CVE-2017-6968
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...
CVE-2017-6968
GMV Checker ATM Security Before 5.0.18 is affected by a buffer‑overflow vulnerability described in PT-2017-03. A remote authenticated attacker can trigger arbitrary code execution, with the advisory noting exploitation via a spoofed control server. The CVE records confirm the vulnerable version r...
Hackers stole $800,000 from ATMs using Fileless Malware
Hackers targeted at least 8 ATMs in Russia and stole $800,000 in a single night, but the method used by the intruders remained a complete mystery with CCTV footage just showing a lone culprit walking up to the ATM and collecting cash without even touching the machine. Even the affected banks coul...
Security Analyst Summit 2017 Day One Recap
SINT MAARTEN—Mike Mimoso and Chris Brook recap the first day of this year’s Security Analyst Summit, including Mark Dowd’s memory corruption bug keynote, Thomas Rid, Daniel Moore, Juan Andres Guerrero-Saade, and Costin Raiu’s Moonlight Maze talk, ATM hacking, and the Lazarus APT. Download:...
Tcpdump ATM Parser Buffer Overflow Vulnerability
Tcpdump is a popular network analysis program. Tcpdump ATM parser print-atm.c:sigprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...
Internet Bug Bounty: CVE-2017-5484 The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print()
Reported to the project maintainers in 2016. The function sigprint did receive a correct caplen parameter value but didn't use it correctly which could result in a read outside of buffer. Fixed by https://github.com/the-tcpdump-group/tcpdump/commit/5d214e36eed3565fbdc0f9b527bbc33a6bb63972...
CVE-2017-5484
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sigprint...
DEBIAN-CVE-2017-5484
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sigprint...
CVE-2017-5484
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sigprint...
CVE-2016-7992
The Classical IP over ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-cip.c:cipifprint...
ALPINE-CVE-2016-7924
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oamprint...
CVE-2016-7924
The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:oamprint...
CVE-2016-7929
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...