83 matches found
Google Apps Directory Sync Detection (Windows)
Google Apps Directory Sync, an application for syncing Google Apps user accounts and your LDAP server, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66271; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...
Google Apps Directory Sync < 3.1.6 Weak Stored Credential Local Disclosure
The version of Google Apps Directory Sync installed on the remote host is earlier than 3.1.6 and is, therefore, affected by a weak stored credential local disclosure vulnerability. An issue exists in the way 'PBEwithMD5andDES' Java encryption algorithm is implemented, allowing a local attacker to...
Cloudflare CEO: AT&T Voicemail Hack Key To Compromise
Loose security protecting voice mailboxes at mobile carrier AT&T provided a key element necessary to successfully hack the Google Enterprise Apps account of tech firm CloudFlare, according to an account of the hack posted by CEO Matthew Prince. Writing on the company’s blog on Monday, Prince said...
Google Adds Two-Factor Verification to Gmail
Google has introduced a new two-step authentication feature for Gmail users that it says will significantly increase the security of the free mail service. The system enables users to set up a method for obtaining a secret code that will be required, along with a password, to access a Gmail...
Google Adds Two-Factor Authentication to Apps Accounts
Google has added a two-factor authentication mechanism to the login procedure for its Google Apps offerings, hoping that the addition will help cut down on the amount of fraudulent activity on these accounts. The way that Google has chosen to approach the problem of two-factor authentication is...
Google Apps googleapps.url.mailto URI Argument Injection
Google Apps is a set of web-based tools hosted by Google under the software-as-a-service model. It features several Web applications with similar functionality to popular office suites, including: Gmail, Google Calendar, Google Chrome, Talk, Docs and Sites. When using Google Apps, the data and...
Google Apps googleapps.url.mailto handler command injection
Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...
Google Apps googleapps.url.mailto handler command injection
Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...
Google Apps googleapps.url.mailto handler command injection
Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...
Google Apps googleapps.url.mailto handler command injection
Added: 10/13/2009 BID: 36581 Background Google Apps is a web-based productivity suite hosted by Google. Problem Google Apps handles googleapps.url.mailto URLs by passing the URL as a command-line argument to the googleapps.exe program without sufficiently validating the URL. This allows command...
google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit (IE)
google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html tested against: Internet Explorer 8, windo...
google apps googleapps.url.mailto:// uri handler cross-browser
No description provided by source. google apps googleapps.url.mailto:// uri handler cross-browser remote command \ execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html teste...
Google Apps googleapps.url.mailto:// URI Handler Command Execution
google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html tested against: Internet Explorer 8, windo...
Google Apps mailto uri handler cross-browser remote command execution
Exploit for unknown platform in category remote exploits ===================================================================== Google Apps mailto uri handler cross-browser remote command execution ===================================================================== Title: Google Apps mailto uri...
Google Apps mailto uri handler cross-browser remote command execution
No description provided by source. google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html tested...
Google Apps - mailto URI handler cross-browser Remote command Execution
Google Apps - mailto URI handler cross-browser Remote command Execution google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site:...
Google Apps - mailto URI handler cross-browser Remote command Execution
google apps googleapps.url.mailto:// uri handler cross-browser remote command execution exploit Internet Explorer by nine:situations:group::pyrokinesis site: http://retrogod.altervista.org/ software site: http://pack.google.com/intl/it/packinstaller.html tested against: Internet Explorer 8, windo...
IT staffs pressured to relax Web security
From SearchSecurity.com Rob Westervelt IT managers are under pressure from the top executives in their organizations to relax their policies on Web security in order to make users more productive. A new survey of more than 1,000 IT managers found that sales and marketing personnel also are leanin...
Authentication flaw
The SAML Single Sign-On SSO Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field...
CVE-2008-3891
The SAML Single Sign-On SSO Service for Google Apps allows remote service providers to impersonate users at arbitrary service providers via vectors related to authentication responses that lack a request identifier and recipient field...