CVE-2014-1211

VMware CVE-2014-1211 affects vCloud Director 5.1.x before 5.1.3. The issue is a Cross-Site Request Forgery (CSRF) in HTTP session management, caused by improper validation that allows an authenticated user to be logged out via a malicious link. Impact in the documented sources is limited to the l...

CVE-2014-1211

Cross-site request forgery CSRF vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout...

VMSA-2014-0001 : VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues

a. VMware ESXi and ESX NFC NULL pointer dereference VMware ESXi and ESX contain a NULL pointer dereference in the handling of the Network File Copy NFC traffic. To exploit this vulnerability, an attacker must intercept and modify the NFC traffic between ESXi/ESX and the client. Exploitation of th...

NSA Metadata Program Likely Not Cost-Effective, Researchers Say

While much of the coverage of the surveillance programs revealed by Edward Snowden have focused on the legality and constitutionality of the collection of metadata and Internet traffic in the name of counter-terrorism and national security, the question of whether these programs are actually cost...

VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX (remote check)

VMware ESXi and ESX unauthorized file access through vCenter Server and ESX OpenVAS Vulnerability Test $Id: gbVMSA-2013-0016remote.nasl 6074 2017-05-05 09:03:14Z teissa $ VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX remote check Authors: Michael Meyer...

Veeam ONE v7 R2 update

Challenge Release Notes for Veeam ONE v7 R2 update Cause Please confirm you are running version 7.0.0.876 prior to installing this update. You can check this under Help | About in Veeam ONE Monitor Client. After upgrading, your build will be version 7.0.0.919. This update should be applied to...

CVE-2013-2825

The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service CPU consumption and communication outage via crafted input...

Input validation

The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service CPU consumption and communication outage via crafted input...

CVE-2013-2825

The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service CPU consumption and communication outage via crafted input...

CVE-2013-2825

CVE-2013-2825 affects the DNP3 Outstation service on Elecsys Director Gateway devices (kernel 2.6.32.11ael1 and earlier). The vulnerability is due to improper input validation, allowing remote attackers to cause a denial of service (CPU load spike and communication outage) via crafted input. A pa...

Yahoo Formally Launches Bug Bounty Program

As promised, Yahoo formally kicked off its bug bounty program late last week, aiming to correct what many in the security industry viewed as misstep after it handed out a paltry $12.50 credit to a researcher for discovering a cross-site scripting error. The company caught flak when in September...

Net Optics Director Default Credentials

The remote Net Optics Director install uses a default set of credentials 'admin' / 'netoptics' to control access to its management interface. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Net Optics Director Web Detection

Binary data netopticsdirectorwebdetect.nbin...

ShoreTel ShoreWare Director Remote Security Bypass Vulnerability

ShoreWare Director is prone to a remote security bypass vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ShoreTel ShoreWare Director Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Elecsys Director Gateway Improper Input Validation Vulnerability

OVERVIEW Adam Crain of Automatak and independent researchers Chris Sistrunk and Adam Todorski have identified an improper input validation in the Elecsys Director Gateway application. Elecsys has produced a patch that mitigates this vulnerability. Adam Todorski has tested the patch to validate th...

Error: Username or password is incorrect when adding vCloud Director

Challenge Encountering issue "Error: Username or password is incorrect" when adding vCloud Director to Veeam Backup & Replication. Solution 1. Verify that the correct password is being utilized. 2. Ports, Permissions, or DNS issues can cause this failure: 1. Ensure connectivity between the Veeam...

JP1/IT Desktop Management - Manager and Hitachi IT Operations Director vulnerable to privilege escalation

Overview JP1/IT Desktop Management - Manager and Hitachi IT Operations Director provided by Hitachi contain a privilege escalation vulnerability. Taizo Tsukamoto of GLOBAL SECURITY EXPERTS inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

JVN#00065218: JP1/IT Desktop Management - Manager and Hitachi IT Operations Director vulnerable to privilege escalation

JP1/IT Desktop Management - Manager and Hitachi IT Operations Director provided by Hitachi contain a privilege escalation vulnerability. Impact Users without administrative privileges may obtain administrative privileges. Solution Update the software Update to the latest version according to the...

House Rejects Amendment to Sever NSA Data Collection Funding

By a narrow dozen votes, the U.S. House of Representatives yesterday failed to pass an amendment to the Department of Defense Appropriations Act of 2014 that would have severed funding for the NSA’s phone record surveillance program turned out by Edward Snowden. The amendment, put forth by Rep...