Security Bulletin: OpenSSL vulnerabilities in IBM Algo Audit and Compliance (CVE-2016-0705, CVE-2016-0798, CVE-2016-0797, CVE-2016-0799, CVE-2016-0702)

Summary OpenSSL could allow a remote attacker to obtain sensitive information and denial of service attacks. OpenSSL is used by IBM Algo Audit and Compliance. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when...

Security Bulletin: OpenSSL vulnerabilities in IBM Algo Audit and Compliance (CVE-2015-3194, CVE-2015-3195, CVE-2015-3196)

Summary OpenSSL is vulnerable to denial of service attacks and OpenSSL could allow a remote attacker to obtain sensitive information. OpenSSL is used by IBM Algo Audit and Compliance. Vulnerability Details CVEID: CVE-2015-3194 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a...

QSC18 Virtual Edition – Building Security In: The Qualys Cloud Platform and Architecture

Digital transformation, driven primarily by the DevOps movement, represents a new opportunity “to redo IT from scratch, but more importantly, to redo security from scratch,” Sumedh Thakar, Qualys' Chief Product Officer, said during QSC18 Virtual Edition. Specifically, organizations can organicall...

Microsoft Windows: Require domain users to elevate when setting a networks location

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncstddomainusersetlocation.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Require domain users to elevate when setting a networks location Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: MS Security Guide: Enable Structured Exception Handling Overwrite Protection

If this setting is enabled, SEHOP is enforced. If this setting is disabled or not configured, SEHOP is not enforced for 32-bit processes. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Microsoft Windows: MSS: How many times unacknowledged data is retransmitted (IPv6)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winmltcpmaxdataretransmissionipv6.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: TcpMaxDataRetransmissions IPv6 How many times unacknowledged data is retransmitted 3 recommended, 5 is default Authors: Emanuel Mo...

Microsoft Windows: MSS: Prevent the dial-up passsword from being saved

This test checks the setting for policy MSS: DisableSavePassword Prevent the dial-up passsword from being saved recommended OpenVAS Vulnerability Test $Id: winmldialuppasswdsaved.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for MSS: DisableSavePassword Prevent the dial-up passsword from...

Microsoft Windows: LAPS: Password Settings: Password Length

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlapspasswdlength.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Password Settings: Password Length Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Monitoring Data & Data Access to Support Ongoing GDPR Compliance – Part III: Tools

The new European Union EU-wide General Data Protection Regulation GDPR was signed into law in late April 2016, and the compliance deadline came into effect on May 25, 2018. The Regulation is expansive and covers a variety of subject areas, provisions, and actions in the form of documented Article...

Platypuses and Policies: Akamai's Approach to the GDPR and Information Security

Written by Meyer Potashman On May 25, 2018, the EU General Data Protection Regulation GDPR went into effect. In preparation, Akamai, like every other company that does business with or interacts in any way with individuals in the EU, needed to re-evaluate our approach to data protection and priva...

Microsoft Windows: Service: Server

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlanmanserver.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Server LanmanServer Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; yo...

Microsoft Windows: Service: Simple TCP/IP Services

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsimpletcpipservices.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Simple TCP/IP Services simptcp Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

Microsoft Windows: Service: Microsoft iSCSI Initiator Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winiscsiinitiatorservice.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Microsoft iSCSI Initiator Service MSiSCSI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Th...

Microsoft Windows: Service: Remote Registry

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremoteregistry.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Remote Registry RemoteRegistry Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Service: Remote Desktop Configuration

The service SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.109270";...

Microsoft Windows: User Account Control: Run all administrators in Admin Approval Mode

This policy setting determines the behavior of all User Account Control UAC policies for the entire system. This is the setting that turns UAC on or off. C Microsoft Corporation 2017. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...

openSUSE Security Update : ImageMagick (openSUSE-2018-598)

This update for ImageMagick to version 7.0.7-34 fixes the following issues : The following security issue was fixed : - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts. The following non-security issues were fixed : - Added support for reading eXIf chun...

Security update for ImageMagick (moderate)

This update for ImageMagick to version 7.0.7-34 fixes the following issues: The following security issue was fixed: - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts. The following non-security issues were fixed: - Added support for reading eXIf chunks ...

Microsoft Windows: Microsoft network client: Digitally sign communications (always)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncdigitallysigncommunicationsalways.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network client: Digitally sign communications always Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

GDPR: A Compliance Quagmire, for Now

The European Union’s General Data Protection Regulation GDPR has gone into effect – but questions as to what compliance actually means are far from settled. While the GDPR is a European regulation, it affects any organization that handles data on E.U. citizens, whether they be customers or...