openSUSE: Security Advisory for samba (openSUSE-SU-2016:0877-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : samba (openSUSE-2016-399)

"This update for the samba server fixes the following issues : Security issue fixed : - CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target; bso11648 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:0816-1)

"This update for the samba server fixes the following issues : Security issue fixed : - CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target; bso11648 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SUSE-SU-2016:0816-1 Security update for samba

This update for the samba server fixes the following issues: Security issue fixed: - CVE-2015-7560: Getting and setting Windows ACLs on symlinks can change permissions on link target; bso11648; bsc968222. Other bugs fixed: - Enable clustering CTDB support; bsc966271. - s3: smbd: Fix timestamp...

JVN#03050861: EXPRESSCLUSTER X vulnerable to directory traversal

EXPRESSCLUSTER X from NEC Corporation is software to provide high availability HA clustering. EXPRESSCLUSTER X contains an issue in WebManager, which may lead to directory traversal. Impact Arbitrary files on the server may be viewed by an attacker who can access to the WebManager. Solution Updat...

MALHEUR - Automatic Analysis of Malware Behavior

A novel tool for malware analysis Malheur is a tool for the automatic analysis of malware behavior program behavior recorded from malicious software in a sandbox environment. It has been designed to support the regular analysis of malicious software and the development of detection and defense...

Cisco AsyncOS for Web Security Appliance Denial of Service Vulnerability

Cisco AsyncOS for Web Security Appliance is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Cisco Email Security Appliance AsyncOS Denial of Service Vulnerability

Cisco AsyncOS on Email Security Appliance ESA device is a set of operating systems running in the Email Security Appliance ESA from Cisco USA. A security vulnerability exists in Cisco AsyncOS on the Cisco ESA device. When the clustering component is enabled in the program, a remote attacker could...

Code injection

Cisco AsyncOS on Email Security Appliance ESA devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service clustering and SSH outage via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636...

CVE-2015-4236

Cisco AsyncOS on Email Security Appliance ESA devices with software 8.5.6-073, 8.5.6-074, and 9.0.0-461, when clustering is enabled, allows remote attackers to cause a denial of service clustering and SSH outage via a packet flood, aka Bug IDs CSCur13704 and CSCuq05636...

CVE-2015-4236

Cisco AsyncOS for Email Security Appliances (ESA) with clustering enabled is affected on ESA software versions 8.5.6-073, 8.5.6-074, and 9.0.0-461. The issue stems from improper handling of high-rate packet floods, allowing remote attackers to trigger a denial-of-service condition that makes clus...

Cisco AsyncOS for Cisco Email Security Appliance and Cisco Web Security Appliance Cluster Denial of Service Vulnerability

A vulnerability in the clustering component of Cisco AsyncOS for Cisco Email Security Appliance ESA and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause the device to become unresponsive on the clustering and SSH configured ports. The vulnerability is due ...

Moscrack v2.08b - Multifarious On-demand Systems Cracker (cracking WPA keys in parallel on a group of computers)

Moscrack is a perl application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack's new plugin framework, hash cracking has become possible. SHA256/512...

BEA WebLogic JSESSIONID Cookie Value Overflow

No description provided by source. $Id: beaweblogicjsessionid.rb 9670 2010-07-03 03:19:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

Vivisimo Clustering Engine 0 Search Script Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8862/info Vivisimo Clustering Engine reported prone to cross-site scripting vulnerability. The problem occurs due to insufficient sanitization of parameters passed to the search script. As a result, an attacker may be...

Moscrack - Cluster Cracking Tool For WPA Keys

Moscrack is a PERL application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack’s new plugin framework, hash cracking has become possible. SHA256/512...

Low: Red Hat Security Advisory: pacemaker security, bug fix, and enhancement update

Updated pacemaker packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

Hazelcast REST Interface Detection

The REST interface for Hazelcast, an open source data clustering solution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67024; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast REST Interface...

Hazelcast Memcached Interface Detection

The memcached interface for Hazelcast, an open source data clustering solution, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67023; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast Memcached Interfac...

Hazelcast Wire Protocol Detection

The wire protocol for Hazelcast, an open source data clustering solution, was found listening on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid67022; scriptversion"1.2"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Hazelcast Wire Protocol...