OracleVM 3.2 : dhcp (OVMSA-2016-0058)

The remote OracleVM system is missing necessary patches to address critical security updates : - exit2 after sending DHCPDECLINE when dhclient has been started with '-1' RHBZ 756490 - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Failback That Was Canceled or Failed Results in CID Mismatch

Challenge In rare situations, if a VMware Replication Failback to Original VM fails or is canceled, the original VM may be left in a 'consolidation needed' state and cannot be powered on or consolidated because of errors such as: The parent virtual disk has been modified since the child was creat...

Recovery Media Creation and Servers with Cluster Shared Volumes

Challenge The Windows Agent Backup job for a failover cluster node with a cluster shared volume displays the following notice: Skipping recovery media collection: cluster contains CSV disks Attempting to create recovery media manually using the Recovery Media Creator on the failover cluster node...

The vulnerability of the microprogramming software of the Cisco ASA security device allows a malicious individual to gain administrator privileges.

The vulnerability of Cisco ASA security devices’ microprogramming software lies in the improper handling of messages that occur during failures. Exploiting this vulnerability allows a malicious actor to remotely reconfigure the ASA device and then gain administrator privileges by sending speciall...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20150408-asa)

The remote Cisco Adaptive Security Appliance ASA is missing a vendor-supplied security patch and is therefore affected by the following vulnerabilities : - A flaw exists in the failover ipsec feature due to not properly handling failover communication messages. An unauthenticated attacker, sendin...

CVE-2015-0675

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

Information disclosure

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

CVE-2015-0675

The CVE-2015-0675 issue affects Cisco ASA Software (failover IPsec feature) where failover communication messages are not properly validated. This allows a remote attacker to reconfigure an ASA device and potentially gain administrative control by sending crafted UDP packets over the local networ...

CVE-2015-0675

The failover ipsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.16, 9.2 before 9.23.3, and 9.3 before 9.33 does not properly validate failover communication messages, which allows remote attackers to reconfigure an ASA device, and consequently obtain administrativ...

Cisco ASA Failover Command Injection Vulnerability

The Cisco Adaptive Security Appliance is an adaptive security appliance that provides modules for security and VPN services. A security vulnerability exists in the failover ipsec feature of Cisco ASA Software that stems from a failure to properly handle secure failover communication messages. An...

How to Perform a Manual Failback (Reverse Replication)

Article Applicability This article is relevant only to non-CDP snapshot-based replicas. Reverse replication cannot be used to fail back a CDP replica. To fail back a CDP replica, use the built-in failback workflow described in Failover and Failback for CDP. Purpose This article describes how to...

Cisco ASA VPN Failover Command Injection Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the VPN code of Cisco ASA Software could allow an authenticated, remote attacker to submit configuration commands to the standby unit via the failover interface. As result, an attacker could be able to take full control of both the active and standby failover units. Copyright C...

Failover of replica using Re-IP causes Windows crash (the “blue screen” error) on the Veeam Backup server.

Challenge During the failover of a replica that was configured to use Re-IP, a Windows "blue screen" error occurs on the Veeam Backup Server. Cause When performing the Re-IP process the Veeam Backup & Replication software mounts the replica's VMDK using VDK to modify registry entries within the...

SOL16124 - OpenSSL vulnerability CVE-2015-0206

The SOD process is only vulnerable if the failover.secure db variable is enabled; the db variable is disabled by default. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed...

SOL16123 - OpenSSL vulnerability CVE-2014-3571

The SOD process is only vulnerable if the failover.secure database variable is enabled; the database variable is disabled by default. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to th...

F5 Networks rsync RCE

The rsync daemon on the remote F5 Networks host is affected by an authentication bypass vulnerability when configured in failover mode. An unauthenticated, remote attacker can exploit this, via a cmi request to the ConfigSync IP address, to read or write arbitrary files. Nessus was able to confir...

CVE-2014-3389

The VPN implementation in Cisco ASA Software 7.2 before 7.25.15, 8.2 before 8.25.51, 8.3 before 8.32.42, 8.4 before 8.47.23, 8.6 before 8.61.15, 9.0 before 9.04.24, 9.1 before 9.15.12, 9.2 before 9.22.6, and 9.3 before 9.31.1 does not properly implement a tunnel filter, which allows remote...

CVE-2014-3389

CVE-2014-3389 affects Cisco ASA VPN Failover component. The vulnerability arises from an improper implementation of the internal tunnel-filter for packets from an established VPN tunnel, allowing remote authenticated users to obtain failover-unit access via crafted packets. Connected advisories c...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - A flaw exists in the SQLNET Inspection Engine due to improper handling of SQL REDIRECT packets. An attacker can exploit this vulnerability by sending a crafted sequence of REDIRECT packets through the...