Key Systems Electronic Key Lockers Command Injection

OVERVIEW Key Systems Electronic Key Lockers contain a command injection vulnerability which may allow a remote unauthenticated attacker to inject commands into the electronic key locker. Key Systems Electronic Key Lockers also contains weak authentication which could allow an attacker...

[SECURITY] Fedora 18 Update: usbredir-0.5-1.fc18

The usbredir libraries allow USB devices to be used on remote and/or virtual hosts over TCP. The following libraries are provided: usbredirparser: A library containing the parser for the usbredir protocol usbredirhost: A library implementing the USB host side of a usbredir connection. All that an...

CVE-2012-4001

The modpagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers...

Webmin contains input validation vulnerabilities

Overview Webmin 1.580, and possibly earlier versions, has been reported to contain input validation vulnerabilities. Description The advisories from American Information Security Group report the following vulnerabilities.CWE-20: Improper Input Validation - CVE-2012-2981 "An input validation flaw...

Fedora Update for puppet FEDORA-2012-6674

Check for the Version of puppet OpenVAS Vulnerability Test Fedora Update for puppet FEDORA-2012-6674 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Memo Dog arbitrary file delete-bug warning-the black bar safety net

Use Conditions: 1. Only limited to windows hosts,linux is invalid, at least in my present machine.） 2. Registered user 3. Need to delete of the file can read and write In modules/ajax/event. mod. php www.xxxx.com Protective remove the picture function doUnlink$pic if!$ pic return false; $type =...

CVE-2012-3488

The libxslt support in contrib/xml2 in PostgreSQL 8.3 before 8.3.20, 8.4 before 8.4.13, 9.0 before 9.0.9, and 9.1 before 9.1.5 does not properly restrict access to files and URLs, which allows remote authenticated users to modify data, obtain sensitive information, or trigger outbound traffic to...

DEBIAN-CVE-2012-3417

The goodclient function in rquotad rquotasvc.c in Linux DiskQuota aka quota before 3.17 invokes the hostsctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny...

Scientific Linux Security Update : autofs on SL5.x i386/x86_64

There was a security issue with the default installed configuration of autofs version 5 whereby the entry for the 'hosts' map did not specify the 'nosuid' mount option. A local user with control of a remote nfs server could create a setuid root executable within an exported filesystem on the remo...

Scientific Linux Security Update : kvm on SL5.4 x86_64

CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes On x86 platforms, the doinsnfetch function did not limit the amount of instruction bytes fetched per instruction. Users in guest operating systems could leverage this flaw to cause large latencies on SMP hosts that could lead...

Scientific Linux Security Update : sendmail on SL4.x i386/x86_64

The configuration of Sendmail was found to not reject the 'localhost.localdomain' domain name for e-mail messages that came from external hosts. This could have allowed remote attackers to disguise spoofed messages CVE-2006-7176. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

GLSA-201207-01 : sudo: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201207-01 sudo: Privilege escalation An error in sudo may allow unintended IPv4 hosts to be granted access to commands. Impact : A local attacker could gain escalated privileges. Workaround : There is no known workaround at this...

sudo: Privilege escalation

Background sudo allows a system administrator to give users the ability to run commands as other users. Access to commands may also be granted on a range to hosts. Description An error in sudo may allow unintended IPv4 hosts to be granted access to commands. Impact A local attacker could gain...

Video: One Minute Of Global Botnet Traffic

We write often about attacks linked to massive botnets like Cutwail, Sality and others. But what does botnet activity really look like, were you to visualize it? Security firm Unveillance has put together this short five minute video to help explain. In the video, Unveillance caputred one minute ...

Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows

====================================================================== Secunia Research 07/06/2012 - Network Instruments Observer - - SNMP Processing Buffer Overflows - ====================================================================== Table of Contents Affected...

[SECURITY] [DSA 2478-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2478-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2012 http://www.debian.org/security/faq -...

targets-ipv6-multicast-mld NSE Script

Attempts to discover available IPv6 hosts on the LAN by sending an MLD multicast listener discovery query to the link-local multicast address ff02::1 and listening for any responses. The query's maximum response delay set to 1 to provoke hosts to respond immediately rather than waiting for other...

Fedora Update for cherokee FEDORA-2011-12657

Check for the Version of cherokee OpenVAS Vulnerability Test Fedora Update for cherokee FEDORA-2011-12657 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for cherokee FEDORA-2011-14622

Check for the Version of cherokee OpenVAS Vulnerability Test Fedora Update for cherokee FEDORA-2011-14622 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 17 Update: puppet-2.6.14-1.fc17

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...