IBM Tealeaf CX 8.8 - Remote OS Command Injection

No description provided by source. IBM Tealeaf CX v8 release 8 Remote OS Command Injection Date: 11/08/2013 Exploit author: drone More information: http://www-01.ibm.com/support/docview.wss?uid=swg21667630 Vendor homepage: http://www-01.ibm.com/software/info/tealeaf/ Version: Version 8 Release 8...

Microsoft Internet Explorer 5.0.1 ITS Protocol Zone Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the ITS InfoTech Storage Protocol URI...

Lmail 2.7 Temporary File Race Condition Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2984/info Jon Zeeff's lmail is a local mail delivery agent LDA designed to provide mail-to-pipe and mail-to-file aliasing for smail. A race condition vulnerability exists in lmail. The lmail program makes insecure use of...

Updated sendmail packages fix CVE-2014-3956

Updated sendmail packages fix security vulnerability: Sendmail before 8.14.9 does not properly closing file descriptors before executing programs. This bug could enable local users to interfere with an open SMTP connection if they can execute their own program for mail delivery e.g., via procmail...

CVE-2014-3956

The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program...

Code injection

The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program...

CVE-2014-3956

The smcloseonexec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FDCLOEXEC flags, which allows local users to access unintended high-numbered file descriptors via a custom mail-delivery program...

FreeBSD Security Advisory FreeBSD-SA-14:11.sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:11.sendmail Security Advisory The FreeBSD Project Topic: sendmail improper close-on-exec flag handling Category: contrib Module: sendmail Announced: 2014-06-...

FreeBSD -- sendmail improper close-on-exec flag handling

Problem Description: There is a programming error in sendmail8 that prevented open file descriptors have close-on-exec properly set. Consequently a subprocess will be able to access all open files that the parent process have open. Impact: A local user who can execute their own program for mail...

Threat Outbreak Alert: Fake Contract Delivery Notice Email Messages on May 21, 2014

Medium Alert ID: 34319 First Published: 2014 May 21 14:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain a contract notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Shipping Delivery Information Email Messages on May 19, 2014

Medium Alert ID: 34296 First Published: 2014 May 20 13:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product delivery invoice notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Failed Package Delivery Notification Email Messages on May 19, 2014

Medium Alert ID: 34276 First Published: 2014 May 19 20:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a package failure notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Shipment Delivery Failure Notification Email Messages on May 14, 2014

Medium Alert ID: 34229 First Published: 2014 May 14 15:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment delivery notification for the recipient. The text in the email message attempts to convince the recipie...

NSF Awards $15m for New Secure Internet Architecture

The National Science Foundation NSF is awarding $15 million in grants for the development, deployment and testing of future Internet architectures that are designed to enhance security, respond to emerging service challenges, and increase scalability. In 2010, the NSF Directorate for Computer and...

Threat Outbreak Alert: Fake Order Delivery Report Notification Email Messages on May 6, 2014

Medium Alert ID: 34118 First Published: 2014 May 6 16:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a proof of delivery report notification for the recipient. The text in the email message attempts to convince the...

Design/Logic Flaw

Unspecified vulnerability in the management GUI in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway before 9.3-66.5 and 10.x before 10.1-122.17 has unspecified impact and vectors, related to certificate validation...

Threat Outbreak Alert: Fake Package Delivery Failure Notice Email Messages on April 29, 2014

Medium Alert ID: 33992 First Published: 2014 April 29 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed package delivery notice for the recipient. The text in the email message attempts to convince the...

CVE-2014-0162

The Sheepdog backend in OpenStack Image Registry and Delivery Service Glance 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or modify an image to execute arbitrary commands via a crafted location...

PT-2014-3508

Name of the Vulnerable Software and Affected Versions OpenStack Image Registry and Delivery Service Glance versions 2013.2 before 2013.2.4 OpenStack Image Registry and Delivery Service Glance versions icehouse before icehouse-rc2 Description The issue allows remote authenticated users with...

Cisco Unity Connection目录遍历漏洞

Bugtraq ID:66676 CVE ID:CVE-2014-2145 Cisco Unity Connection 可以透明地将留言和语音识别组件与您的数据网络集成到一起，不间断地提供对呼叫和留言的全面访问。 Cisco Unity Connection的消息传送API在实现上存在目录遍历漏洞，这可使经过身份验证的远程用户通过.wav文件和audio/x-wav MIME类型的访问限制，利用此漏洞读取任意文件。 0 Cisco Unity Connection 目前厂商已经发布了升级补丁以修复漏洞，请下载使用：...