SuSE 11.1 Security Update : pcsc-lite (SAT Patch Number 3889)

An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 / CVE-2010-4531 have been assigned to these issues. Additionally a new device ID for card readers was added. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 10 Security Update : pcsc-lite (ZYPP Patch Number 7298)

A buffer overflow in pcsc-lite while handling smart card responses has been fixed. CVE-2010-4531 has been assigned to this issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Debian DSA-2156-1 : pcscd - buffer overflow

MWR InfoSecurity identified a buffer overflow in pcscd, middleware to access a smart card via PC/SC, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

OpenSC < 0.12.0 Smart Card Serial Number Multiple Buffer Overflow Vulnerabilities - Windows

OpenSC is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA-2156-1] pcscd security update

------------------------------------------------------------------------ Debian Security Advisory DSA-2156-1 [email protected] http://www.debian.org/security/ Steve Kemp January 31, 2011 http://www.debian.org/security/faq -...

DSA-2156-1 pcsc-lite - buffer overflow

Bulletin has no description...

Hobbit helmsman Jackson trap in $190K credit card scam !

Lord of the Rings Director Peter Jackson was the ambition of a US$190,000 £120,000 acclaim agenda artifice that approved to bond out a disturbing business. The recently-knighted Hobbit helmsman acclimated his American Express agenda to shop for items from the Michigan Toy Soldier Company, which...

Mandriva Linux Security Advisory : pcsc-lite (MDVSA-2011:015)

A vulnerability has been found and corrected in pcsc-lite : Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial o...

Mandriva Linux Security Advisory : opensc (MDVSA-2011:011)

A vulnerability has been found and corrected in opensc : Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c,...

[ MDVSA-2011:015 ] pcsc-lite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:015 http://www.mandriva.com/security/ Package : pcsc-lite Date : January 20, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found an...

[ MDVSA-2011:014 ] ccid

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:014 http://www.mandriva.com/security/ Package : ccid Date : January 20, 2011 Affected: Corporate 4.0 Problem Description: A vulnerability has been found and corrected in ccid: Signedness error in ccidserial....

OpenSC / PCSC-Lite library buffer overflow

Buffer overflow on oversized smart card serial number...

Lush's UK Website Hacked, Credit Card Numbers Used !

Hackers are built after stealing credit card numbers Lush UK site, which was closed on Friday and replaced with a message that alerts customers that their account information might have been compromised. According to the message, all who have made purchases online at the site of the craftsmanship...

Thousands Of Bank Details At Risk As Hackers Hit Lozano UK Site !

Hackers can obtain the bank details of thousands of customers in a lush, a cosmetics company acknowledged yesterday. The company invites all our customers who have purchased products online during the month of October to check fraud. To date, 43 customers had their cards are used tricks. Thieves...

Details PandaLabs Cyber-criminal Black Market Report !

PandaLabs researchers published an investigative look at the growing online crime, cyber black market where it sold the stolen credit card information and other data stolen more than 50 shops, mostly online. PandaLabs clues about how the black market of cybercrime has diversified and now sells a...

Website of Lush Cosmetics Hacked

The website of cosmetic company Lush has apparently been targeted by hackers as customers who’ve made purchases on their UK website, Lush.co.uk, are being encouraged to check their bank statements for suspicious activity, according to a post on ZDNet. It remains to be seen how exactly the site wa...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1079 / 1087)

The SUSE Linux Enterprise 11 kernel was updated to fix various bugs and several security issues. It was also updated to the stable release 2.6.27.25. The following security issues were fixed : - A local denial of service problem in the splice2 system call was fixed. CVE-2009-1961 - A crash on r81...

Mandriva Update for pcsc-lite MDVSA-2011:015 (pcsc-lite)

Check for the Version of pcsc-lite OpenVAS Vulnerability Test Mandriva Update for pcsc-lite MDVSA-2011:015 pcsc-lite Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for opensc MDVSA-2011:011 (opensc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Zeus Targeting Online Payment Services

The Zeus Botnet continues to evolve and shift in focus from its traditional targets, banks and their customers, to other money-handling institutions like electronic money and online payment systems, according to a new report. The shift has been going on for months and likely follows policy moves ...