CVE-2011-1527

The kdbldap plugin in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a kinit operation with incorrect string case for the realm, relate...

krb5: KDC denial of service vulnerabilities (MITKRB5-SA-2011-006)

The kdbldap plugin in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a kinit operation with incorrect string case for the realm, relate...

PT-2011-1165

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.9 through 1.9.1 MIT Kerberos 5 versions prior to 1.9.2 Description The issue allows remote attackers to cause a denial of service, potentially leading to a disruption in confidentiality, integrity, and availability of...

CVE-2011-1527

The kdbldap plugin in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 through 1.9.1, when the LDAP back end is used, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a kinit operation with incorrect string case for the realm, relate...

CVE-2011-3003: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an unspecified WebGL test case that triggers a memory-allocation error and a resulting out-of-bounds write operation...

Backup job fails with error: Insufficient system resources exist to complete the requested service.

Challenge The following entry can be seen in the log file: Client error: Insufficient system resources exist to complete the requested service Cause The error is relayed by Veeam Backup & Replication from the underlying Windows OS. Solution As the underlying Windows OS is reporting this error,...

History Sniffing Case Dismissed Because Defendant Fails to Quantify Losses

A federal court in New York has dismissed a case in which the plaintiff claimed that a third-party advertiser had violated the Computer Fraud and Abuse Act CFAA by sniffing her browser history and using flash cookies, ruling that the plaintiff didn’t prove that the actions were harmful enough...

Veeam Service Fails to Start with Error 1920

Challenge A service relating to Veeam Backup & Replication fails to start and displays the message: Error 1920. Service failed to start. Verify that you have sufficient privileges to start system services. Copy Solution Common Causes The service is set to run as an account other than Local System...

Hardware Status Differs in vCenter Server and Veeam ONE

Challenge One of Veeam ONE's monitoring features is monitoring and alerting on host hardware status changes. These alerts are good to know in case hosts in your environment have hardware issues, the issue will be notified in the alert, and the severity of the issue by VMware's color scale Yellow ...

Mobius Forensic Toolkit v0.5.8 Released

Mobius Forensic Toolkit v0.5.8 Released Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool...

Debian DSA-2265-1 : perl - lack of tainted flag propagation

Mark Martinec discovered that Perl incorrectly clears the tainted flag on values returned by case conversion functions such as 'lc'. This may expose preexisting vulnerabilities in applications which use these functions while processing untrusted input. No such applications are known at this stage...

DSA-2265-1 perl - missing taint check

Bulletin has no description...

Former Cisco Engineer Arrested for Hacking !

Former Cisco Engineer Arrested for Hacking ! A former Cisco engineer was arrested last year on charges of hacking into his former employer's network and is currently awaiting extradition in Canada. The charges against Peter Alfred-Adekeye, a British national who worked for Cisco before leaving to...

India's CBI plans to send teams to US, Europe to trace hackers !

Against the backdrop of the attack on its website by "Pakistan Cyber Army", the CBI is considering to send its team to the US and Europe to trace hackers involved in the defacement. Sources said the agency officials have pin-pointed three Internet Protocol IP address -- a unique numerical label...

CVE-2011-0188

The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service applicati...

Jesse William McGraw , Clinic Hacker Gets 9 Year Sentence !

Jesse William McGraw , Clinic Hacker Gets 9 Year Sentence ! A former security guard at a Dallas medical office has been sentenced to more than nine years in prison in a hacking case that drew national attention because the hacker posted video of the crimes on YouTube. Jesse William McGraw was...

Mobius Forensic Toolkit v0.5.7 released !

Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool. Changelog Six news registry reports were...

CVE-2011-0449

actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action...

CVE-2011-0449: Undefined Security Weakness

actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action...

PT-2011-2352

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 3.0.x through 3.0.3 Description The issue allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters, when a case-insensitive filesystem is...