Cisco Prime Infrastructure contains SUID root binaries

Overview The Cisco Prime Infrastructure version 2.2 contains two binaries with SUID root world-executable privileges, allowing any local user to execute arbitrary commands as root. Description CWE-276: Incorrect Default Permissions Two binaries are included in Cisco Prime version 2.2 that run as...

Researchers to Share Details of Cyber-Terrorists Targeting Indian Government Officials

The Potential threat, range from very narrow to very broad, posed by Cyber-Terrorism has provoked considerable alarm. Terrorists involved in Cyber Espionage and Operations aim at gaining access to Nation's critical infrastructure involving both Government as well as Private sectors. The Frequency...

The popular DNS server software BIND exposed serious DoS vulnerability-vulnerability warning-the black bar safety net

BIND is the world's most popular DNS server software. The Internet Association, the ISC published Vulnerability CVE-2 0 1 5-5 4 7 7 patch, this is an affected BIND server to a serious denial of service vulnerability. BIND denial of service vulnerability A week ago, the Internet Association, the I...

Cisco Application Policy Infrastructure Controller privilege escalation

It's possible to obtain root access...

Cisco Application Policy Infrastructure Controllers and Nexus 9000 Series ACI Mode Switches Unauthorized Access Vulnerability

Cisco Application Policy Infrastructure is a controller that automates the management of application-centric infrastructures.Cisco Nexus 9000 Series ACI Mode Switches The Cisco Nexus 9000 Series ACI Mode Switches are 9000 series switches for application-centric infrastructure ACI. An unauthorized...

CVE-2015-2587

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure...

Design/Logic Flaw

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure...

CVE-2015-2587

Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1, 8.2.2, and 15.0 allows remote attackers to affect integrity via vectors related to SWSE Server Infrastructure...

CVE-2015-2587

CVE-2015-2587 affects Oracle Siebel CRM versions 8.1.1, 8.2.2 and 15.0 in the Siebel UI Framework component, specifically the SWSE Server Infrastructure. The vulnerability, described in connected Nessus data, enables network-based access that can lead to unauthorized update/insert/delete operatio...

Hacking Team Promises to Rebuild RCS

The aftermath of the Hacking Team attack raised legitimate questions about the controversial Italian surveillance software vendor’s long-term viability. With reams of sensitive internal data and intellectual property posted online, how could the company survive? For now, however, the company seem...

Census Project Identifies Open Source Projects at Risk

Heartbleed may have brought on a major case of heartburn last April for system admins worldwide, but a positive offshoot of the biggest of the Internet-wide bugs was that it opened a lot of eyes to the lack of support afforded even ubiquitous open source software projects. Shortly after Heartblee...

Cisco Nexus 9000 Application Policy Infrastructure Controller Unauthorized Access Vulnerability

The Cisco Application Policy Infrastructure Controller APIC on Nexus 9000 devices is a Cisco controller that runs on 9000 series switch devices to automate the management of application-centric infrastructure ACI. It supports access to all ACI information, optimizing the application lifecycle,...

Cisco Application Policy Infrastructure Controller Unauthorized Access Vulnerability

A vulnerability in the role-based access control RBAC of the Cisco Application Policy Infrastructure Controller Cisco APIC could allow an authenticated, remote attacker to have read access to certain information stored in the affected system. The vulnerability is due to improper handling of RBAC...

Java: PKIX Trust Engines Exhibit Critical Flaw In Trusted Names Evaluation

It was found that PKIX trust components allowed an X.509 credential to be trusted if no trusted names were available for the entityID. An attacker could use a certificate issued by a shibmd:KeyAuthority trust anchor to impersonate an entity within the scope of that keyAuthority...

Facebook Helps Combat Apple XARA Vulnerabilities With Osquery

Apple may still be in the process of patching XARA, the series of weaknesses that surfaced in its authentication infrastructure last week, but Facebook has stepped up and made it easier for organizations to detect whether their system is being exploited by the vulnerabilities. Engineers with the...

EMC Unified Infrastructure Manager/Provisioning authentication bypass

Authentication bypass if LDAP authentication is used...

CVE-2015-3318

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....

CVE-2015-3316

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....

Authentication flaw

EMC Unified Infrastructure Manager/Provisioning UIM/P 4.1 allows remote attackers to bypass LDAP authentication by providing a valid account name...

Design/Logic Flaw

CA Common Services, as used in CA Client Automation r12.5 SP01, r12.8, and r12.9; CA Network and Systems Management r11.0, r11.1, and r11.2; CA NSM Job Management Option r11.0, r11.1, and r11.2; CA Universal Job Management Agent; CA Virtual Assurance for Infrastructure Managers aka SystemEDGE 12....