CentOS Update for qemu-guest-agent CESA-2013:0896 centos6

Check for the Version of qemu-guest-agent OpenVAS Vulnerability Test CentOS Update for qemu-guest-agent CESA-2013:0896 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...

qemu security update

CentOS Errata and Security Advisory CESA-2013:0896 Updated qemu-kvm packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring Syste...

Moderate: Red Hat Security Advisory: qemu-kvm security and bug fix update

Updated qemu-kvm packages that fix one security issue and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

The biggest bank robbery in history, Hackers stole $45 million

They didn't use guns, masks or even threatening notes passed to bank tellers. It may be the largest bank robbery in history. A gang of cyber-criminals operating in 26 countries stole $45 million by hacking their way into a database of prepaid debit cards. Reportedly, the group of hackers targeted...

ATM Heists Net $45 Million and Indictments

Eight members of a New York cybercrime cell have been indicted in a carefully coordinated heist that drained $45 million from thousands of ATMs in less than 24 hours. In an federal indictment unsealed Thursday in Brooklyn, authorities charge the attacks were reminiscent of a suspense movie in whi...

Name.com Data Breach Forces Password Breach

Domain registrar Name.com has informed its customers via email of a data breach and asked them to reset their passwords. The company, based in Denver, said it discovered a breach and customer account information such as encrypted credentials and credit card numbers may have been accessed along wi...

LivingSocial Ups its Password Encryption After Breach

The popular daily deal site LivingSocial announced Monday it has abandoned the SHA1 hash for Blowfish’s bcrypt following a massive data breach that impacted 50 million customers. The company confirmed last weekend that its computer systems were attacked and thieves gained access to names, e-mail...

50 million customers compromised in LivingSocial hack

LivingSocial, a daily deals website part-owned by Amazon Inc., hit by a cyber attack that may have affected more than 50 million customers and will need to reset their passwords. LivingSocial says it has 70 million members worldwide. Leaked data includes names, e-mail addresses, dates of birth an...

CVE-2013-1176

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...

Design/Logic Flaw

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...

CVE-2013-1176

Cisco TelePresence DSP Card DoS (CVE-2013-1176): Affected devices are MCU 4500/4501, MSE 8510, and TelePresence Server, prior to software versions 4.3(2.30) for MCU/MSE and 2.3(1.55) for Server. The DSP card fails to properly validate H.264 data, allowing remote attackers to trigger a denial of s...

Linode Hacked Through ColdFusion Zero Day

The attackers who compromised Web hosting provider Linode used a zero day vulnerability in Adobe ColdFusion and were able to access the company’s database, source code and customers’ credit card numbers and passwords. The company said that the customer credit card numbers were encrypted, as were...

PT-2013-2932

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.4 through 3.4.4S Cisco IOS XE version 3.5 Cisco IOS XE version 3.6 Description The issue is related to the improper implementation of the Cisco Multicast Leaf Recycle Elimination MLRE feature in Cisco IOS XE, allowing...

CVE-2013-1167: Improper Limitation of a Pathname to a Restricted Directory

Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers ASR, when bridge domain interface BDI is enabled, allows remote attackers to cause a denial of service card reload via packets that are not properly handled during the processing of encapsulation, aka...

PT-2013-2935

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 3.4 before 3.4.2S, and 3.5 Description The issue allows remote attackers to cause a denial of service card reload via packets that are not properly handled during the processing of encapsulation when bridge...

PT-2013-2934

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 3.4 before 3.4.5S Cisco IOS XE versions 3.5 through 3.7 before 3.7.1S Description The issue allows remote attackers to cause a denial of service card reload by sending many SIP packets when VRF-aware NAT and S...

PT-2013-2933

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.x through 3.7 before 3.7.1S Description The issue allows remote attackers to cause a denial of service by sending many crafted L2TP packets. Successful exploitation could trigger a reload of the Embedded Services...

CVE-2013-1166: Improper Input Validation

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

PT-2013-3923

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.4 through 3.4.4S Cisco IOS XE versions 3.5 through 3.7 before 3.7.1S Description The issue is related to the improper implementation of the Cisco Multicast Leaf Recycle Elimination MLRE feature in Cisco IOS XE, allowing...

CVE-2013-1165: Improper Input Validation

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR allows remote attackers to cause a denial of service card reload by sending many crafted L2TP packets, aka Bug ID CSCtz23293...