CVE-2012-1342

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

PT-2012-3198

Name of the Vulnerable Software and Affected Versions Cisco Carrier Routing System CRS versions 3.9 through 4.1 Description The issue allows remote attackers to bypass ACL entries via fragmented packets. Recommendations For versions 3.9 through 4.1, update to a version that includes the fix for B...

CVE-2012-1342: Incorrect Authorization

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

These updated packages fix the following security issues : - the absence of a protection mechanism when attempting to access a critical section of code has been found in the Linux kernel open file descriptors control mechanism, fcntl. This could allow a local unprivileged user to simultaneously...

Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS XR Software Route Processor Denial of Service Vulnerability Advisory ID: cisco-sa-20120530-iosxr Revision 1.0 For Public Release 2012 May 30 16:00 UTC GMT +--------------------------------------------------------------------- Summary =====...

Carrier IQ Hires a Chief Privacy Officer

Carrier IQ, a startup heavily bruised last fall by harsh criticism of its handset diagnostic software, today announced it’s hired a high-profile lawyer as its Chief Privacy Officer. According to a news release, Magnolia Mansourkia Mobley, a CIPP and former Verizon executive, will be tasked with...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 is affected by a vulnerability that allows remote attackers to cause a denial of service (Metro subsystem crash) through a fragmented GRE packet (Bug ID CSCts14887). The available sources specify the affected product and version and the attack vector as network-...

PT-2012-1681

Name of the Vulnerable Software and Affected Versions Cisco Carrier Routing System version 3.9.1 Description The issue allows remote attackers to cause a denial of service, resulting in a Metro subsystem crash. This can be achieved by sending a fragmented GRE packet. Recommendations For Cisco...

CVE-2011-3283: Improper Input Validation

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

Saudi hacker target Israeli stock exchange and National air carrier

Saudi hacker target Israeli stock exchange and National air carrier Saudi cyber Hacker OxOmar struck again on Monday. This time disrupted the websites of Israel's stock exchange and National air carrier. Last week he had leaked private information about more than 400,000 Israelis. Credit card...

The Appropriately Hyped Stories of 2011

It’s that most un-wonderful time of the year: the time when everyone writes fluffy articles full of lists, retrospectives and look-aheads. Even we did it. Many of these lists involve some variation on the theme of most overhyped or least organic or or most awesomest or lowest fat content. This...

Sprint Disables Carrier IQ Software On Its Devices

Sprint has decided to stop using Carrier IQ’s diagnostic software in light of the ongoing controversy about user privacy, according to reports. A Sprint spokesperson told the Website MobileBurn that the carrier has “weighed customer concerns and…disabled use of the tool so that diagnostic...

With Mobile Devices, Users Are the Product, Not the Buyer

A lot has been said about the Carrier IQ software, the way that it’s used by carriers and whether it’s capable of intercepting calls, texts and data on users’ handsets. It’s still not clear exactly what’s going on, but one lesson that has emerged from all of this is this: The mobile devices peopl...

Tools Emerge to Detect Carrier IQ App

As the situation involving Carrier IQ continues to evolve and users become more aware of the software and its capabilities, a couple of tools designed to detect the application’s presence on mobile devices have emerged. Mobile-security vendor Lookout has developed an Android app that can detect...

Researchers Say Carrier IQ Not Logging Texts or Emails, But Has Some Worrisome Capabilities

Security researchers who have investigated the inner workings of the Carrier IQ software and its capabilities say that the application has some powerful, and potentially worrisome capabilities, but that as it’s currently deployed by carriers it doesn’t have the ability to record SMS messages, pho...

Carrier IQ Controversy Spawns Lawsuits

The ongoing controversy about Carrier IQ’s software has now entered the courts. Mobile phone users around the country have filed a number of lawsuits in response to allegations that Carrier IQ’s software tracks consumers illegally. Among these suits is a class action filed in California against...

Voodoo Carrier IQ detector application released for Android

Voodoo Carrier IQ detector application released forAndroid An Android developer recently discovered a clandestine application called Carrier IQ built into most smartphones that doesn't just track your location; it secretly records your keystrokes, and there's nothing you can do about it. A new...

Voodoo Carrier IQ detector application released for Android

Voodoo Carrier IQ detector application released for Android An Android developer recently discovered a clandestine application called Carrier IQ built into most smartphones that doesn't just track your location; it secretly records your keystrokes, and there's nothing you can do about it. A new...

Sen. Franken Demands Answers From Carrier IQ on Mobile Tracking

The fallout from the controversy surrounding the presence of Carrier IQ’s software on millions of mobile devices on several different platforms has now reached Washington. Sen. Al Franken on Thursday sent a letter to the company, demanding answers to a series of questions about the software and i...