Real World Security – Larry Whiteside Interview

Like every other security executive in the health care industry, Larry Whiteside, CISO of the Visiting Nurse Service of New York, spends much of his time dealing with compliance-related issues. But the distributed nature of his user population means that he has sensitive patient data on thousands...

Real World Security – Andy Weeks Interview

Andy Weeks, manager of risk and compliance for enterprise information security, at Humana Inc., one of the larger companies in the world, knows a thing or two about large-scale security implementations. And in a company whose customer data is one of its main assets, security is a corporate...

Cross site scripting

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

CVE-2009-3029

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

CVE-2009-3029

CVE-2009-3029 (and related CVE-2009-3030) affects Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier. The vulnerability is a cross-site scripting issue in the console, where external client input is not properly sanitized and some error messages are not encoded, enab...

CVE-2009-3030

CVE-2009-3030 relates to Symantec SecurityExpressions Audit and Compliance Server (versions 4.1 and 4.1.1 and earlier) and covers multiple XSS/HTML-injection issues. The documented vulnerabilities arise from insufficient input validation and failing to properly encode error messages, allowing rem...

CVE-2009-3029: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages...

CVE-2009-3030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote attackers to inject arbitrary web script or HTML via vectors that trigger an error message in a response, related to an "HTML Injection issue."...

Symantec SecurityExpressions Audit and Compliance Server Multiple XSS

Symantec SecurityExpressions Audit and Compliance Server is installed on the remote host. The installed version is affected by multiple cross-site scripting vulnerabilities. - The web console fails to sanitize user-supplied input to certain unspecified parameters. An authorized user may be able t...

Symantec SecurityExpressions Audit and Compliance Server Multiple XSS

Binary data 5206.prm...

[SECURITY] Fedora 11 Update: firefox-3.5.3-1.fc11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 10 Update: firefox-3.0.14-1.fc10

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Alex Howard on Compliance, Breach Notification and the Rockefeller Bill

Dennis Fisher talks with Alex Howard, associate editor of Searchcompliance.com, about the burden compliance places on security staffs, the growing tide of breach notification laws and the misunderstandings surrounding the Rockefeller bill and the Internet kill switch. Download Subscribe to the...

Oracle 11g (11.1.0.6) Password Policy and Compliance

Many security standards require the tracking of users' password history to prevent password re-use. In Oracle 11g 11.1.0.6, if a security administrator has enabled 11g passwords exclusively then tracking password history is broken. This can affect compliance. This was addressed by Oracle in their...

Oracle 11g (11.1.0.6) Password Policy and Compliance

Many security standards require the tracking of users' password history to prevent password re-use. In Oracle 11g 11.1.0.6, if a security administrator has enabled 11g passwords exclusively then tracking password history is broken. This can affect compliance. This was addressed by Oracle in their...

[SECURITY] Fedora 11 Update: firefox-3.5.2-2.fc11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

PCI DSS compliance : options settings

This plugin reports the values of a few important scan settings if PCI DSS compliance checks are enabled. These scan settings are preset based on the scan template you have selected, but in some cases may be overriden. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

[SECURITY] Fedora 10 Update: firefox-3.0.12-1.fc10

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 11 Update: firefox-3.5.1-1.fc11

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Gartner Sees Better Days Ahead For Security Budgets

From SearchSecurity.com Robert Westervelt The dismal economy has put the brakes on a lot of security projects, but the need to maintain the basics and automate some security functions has fueled interest in managed security services and some specific security areas, according to analysts at Gartn...