Threat Outbreak Alert RuleID12041: Email Messages Distributing Malicious Software on October 20, 2014

Medium Alert ID: 36149 First Published: 2014 October 20 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12041 may contain the following files: Name |...

Threat Outbreak Alert RuleID12010: Email Messages Distributing Malicious Software on October 16, 2014

Medium Alert ID: 36120 First Published: 2014 October 17 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12010 may contain the following files: Name |...

Malware-Laced Emails Appear to Come From LogMeIn

The SANS Internet Storm Center yesterday warned users and administrators to be on the lookout for malicious emails purporting to come from the security and authentication firm LogMeIn. For it’s part, LogMeIn is aware of the attacks, and has issued a number of warnings to its customers on its blog...

Threat Outbreak Alert RuleID11654: Email Messages Distributing Malicious Software on September 22, 2014

Medium Alert ID: 35800 First Published: 2014 September 22 19:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11654 may contain the following files: Name ...

Vulnerability in OpenSSL - Race condition in ssl_parse_serverhello_tlsext

A race condition was found in sslparseserverhellotlsext. If a multithreaded client connects to a malicious server using a resumed session and the server sends an ec point format extension, it could write up to 255 bytes to freed memory...

Remote Access Hack Compromises POS Vendor

A popular point of sale vendor may have suffered a data breach earlier this year that could affect customers of a handful of Pacific Northwest restaurants. Vancouver, Wash.-based Information Systems & Supplies, a supplier of POS systems to restaurants such as Dairy Queen, Buffalo Wild Wings and...

POS Machine Vendor Warns of Possible Payment Card Breach at Restaurants

Due to the better track inventory and accuracy of records, Point-of-sale POS systems are being used in most of the industries including restaurants, lodging, entertainment, and museums around the world. It can be easily set-up depending on the nature of the business. Despite that, Point-of-sale P...

LogMeIn 4.0.784 'cfgadvanced.html' HTTP Header Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/35236/info LogMeIn is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input. By inserting arbitrary headers into an HTTP response, attackers may be...

LogMeIn Hamachi <= 2.1.0.362 Remote DOS

LogMeIn Hamachi security flaws and steps with a simple python script to provoke an Hamachi Remote D.O.S. This is private exploit. You can buy it at https://0day.today...

LogMeIn Client Detection

Binary data 8824.prm...

LogMeIn Listening Server Detection

Binary data 5507.prm...

Memory corruption

LogMeIn Remote Access Utility ActiveX control RACtrl.dll allows remote attackers to cause a denial of service crash by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption...

CVE-2008-7053

LogMeIn Remote Access Utility ActiveX control RACtrl.dll allows remote attackers to cause a denial of service crash by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption...

CVE-2008-7053

LogMeIn Remote Access Utility ActiveX control RACtrl.dll allows remote attackers to cause a denial of service crash by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption...

CVE-2008-7053

The vulnerability CVE-2008-7053 affects LogMeIn Remote Access Utility ActiveX control RACtrl.dll. The issue arises when fgcolor and bgcolor properties are set to certain long values, triggering memory corruption and leading to a denial of service (crash). No specific affected versions, patch deta...

CVE-2008-7053: Undefined Security Weakness

LogMeIn Remote Access Utility ActiveX control RACtrl.dll allows remote attackers to cause a denial of service crash by setting the fgcolor and bgcolor properties to certain long values that trigger memory corruption...

LogMeIn cfgadvanced.html页面HTTP头注入漏洞

BUGTRAQ ID: 35236 LogMeIn是流行的远程访问软件，允许通过网络控制计算机。 LogMeIn的cfgadvanced.html页面存在HTTP头注入漏洞。如果用户受骗跟随了恶意链接并收到了lang参数，LogMeIn会将 lang参数值储存在HKEYLOCALMACHINE\SOFTWARE\LogMeIn\V5\Appearance\Language注册表中，并在每次点击链接的时候在Content-Language头中使用，因此特制参数可能导致注入并执行任意代码。 LogMeIn Pro 4.0.784 厂商补丁： LogMeIn, Inc. -----------...

LogMeIn 4.0.784 - cfgadvanced.html HTTP Header Injection

LogMeIn 4.0.784 - cfgadvanced.html HTTP Header Injection source: https://www.securityfocus.com/bid/35236/info LogMeIn is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input. By inserting arbitrary headers into an HTTP...

LogMeIn 4.0.784 - 'cfgadvanced.html' HTTP Header Injection

source: https://www.securityfocus.com/bid/35236/info LogMeIn is prone to a vulnerability that allows attackers to inject arbitrary HTTP headers because it fails to sufficiently sanitize input. By inserting arbitrary headers into an HTTP response, attackers may be able to launch various attacks,...

LogMeIn Agent Detection

LogMeIn is a remote control application. In the typical mode of operation, a user does not connect to the LogMeIn agent on the host directly. Rather, all traffic, including credentials, is routed through the vendor's servers, with traffic possibly tunneled through firewalls. Alternatively, it is...