CVE-2009-4133

CVE-2009-4133 affects Condor (versions 6.5.4–7.2.4, 7.3.x, and 7.4.0 as used in MRG/GRID environments). The issue allows remote authenticated users to queue jobs as an arbitrary user by using a Condor CLI tool to modify an unspecified job attribute, enabling privilege elevation (partial confident...

CVE-2009-4133

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...

CVE-2009-4133: Undefined Security Weakness

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...

Privacy Concerns Raised About Smart Grids

Technologists already are worried about the security implications of linking nearly all elements of the U.S. power grid to the public Internet. Now, privacy experts are warning that the so-called “smart grid” efforts could usher in a new class of concerns, as utilities begin collecting more...

CBS 60 Minutes on Cyber Terrorism

Could hackers get into the computer systems that run crucial elements of the world’s infrastructure, such as the power grids, water works or even a nation’s military arsenal? Watch the CBS News 60 Minutes segment. Read the transcript...

FlexCell Grid FlexCell.Grid ActiveX Control Multiple Method Arbitrary File Overwrite

The remote host contains the FlexCell.Grid ActiveX control, a component of the FlexCell grid control software. The version of the control installed on the remote host reportedly fails to validate input to the 'File' argument of the 'SaveFile' and 'ExportToXML' methods before writing to the...

Oracle将发布2009 7月重要补丁更新修复多个安全漏洞

Bugraq ID: 35618 Oracle Database是一款商业性质大型数据库系统。 racle发布了2009年7月的紧急补丁更新公告，补丁修复了跨越100多个Oracle产品中33个安全漏洞，受影响的软件包括如下： Oracle Database Oracle Application Server Oracle Identity Management Oracle E-Business Suite Release Oracle Enterprise Manager Database Control Oracle Enterprise Manager Grid Control...

Solaris 10 (sparc) : 121957-01 (deprecated)

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121957 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 121956-01 (deprecated)

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121956 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 9 (sparc) : 121956-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 121956-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 7 (sparc) : 121957-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 7 (sparc) : 121956-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 121958-01

N1 Grid Engine 6.0x86: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 121957-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 121959-01 (deprecated)

N1 Grid Engine 6.0x86: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121959 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 10 (x86) : 121958-01 (deprecated)

N1 Grid Engine 6.0x86: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121958 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 8 (x86) : 121958-01

N1 Grid Engine 6.0x86: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 121957-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in include/zstore.php in Zazzle Store Builder 1.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 gridPage and 2 gridSort parameters. NOTE: some of these details are obtained from third party information...