Code injection

The internal web server in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...

CVE-2013-0548

Multiple cross-site scripting XSS vulnerabilities in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1...

CVE-2013-2960

The CVE-2013-2960 issue affects IBM Tivoli Monitoring (ITM) Basic Services, specifically the KDSMAIN HTTP processing, where a crafted URL can trigger a buffer overflow and cause a segmentation fault (remote DoS). Affected ITM versions include 6.2.0–6.2.3 with various FP levels (notably FP3 for 6....

CVE-2013-2961

CVE-2013-2961 affects IBM Tivoli Monitoring (ITM) Basic Services, used in IBM Application Manager for Smart Business. The issue arises in the ITM Basic Services web server handling crafted HTTP traffic, allowing remote attackers to redirect HTTP requests and bypass proxy-server configuration. Aff...

CVE-2013-0551

CVE-2013-0551 affects IBM Tivoli Monitoring Basic Services in ITM 6.2.x (6.2.0[FP3], 6.2.1[FP4], 6.2.2[FP9], 6.2.3 before FP3) as used by IBM Application Manager for Smart Business. Description: specially crafted URLs can cause an abend/DoS in the Tivoli Monitoring process. IBM’s remediation invo...

CVE-2013-0548

CVE-2013-0548 affects IBM Tivoli Monitoring Basic Services (ITM) and IBM Application Manager for Smart Business. The vulnerability is a cross-site scripting (XSS) issue in Basic Services that could allow remote attackers to inject arbitrary script via unspecified vectors. Affected ITM versions in...

CVE-2013-2961

The internal web server in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...

CVE-2013-2960

Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before...

CVE-2013-0551

The Basic Services component in IBM Tivoli Monitoring ITM 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business formerly Tivoli Foundations Application Manager 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products,...

After Viber, Saudi Arabia threatens to block WhatsApp and Skype

Viber was blocked last week for non-compliance by The government of Saudi Arabia and Now they may move to block Skype and WhatsApp in the coming weeks, if the U.S. based messaging provider fails to comply with requirements set by the country's telecom regulator. CITC confirmed that they could tak...

After Viber, Saudi Arabia threatens to block WhatsApp and Skype

Viber was blocked last week for non-compliance by The government of Saudi Arabia and Now they may move to block Skype and WhatsApp in the coming weeks, if the U.S. based messaging provider fails to comply with requirements set by the country's telecom regulator. CITC confirmed that they could tak...

Threat Outbreak Alert: Fake Documents Attachment Email Messages on June 14, 2013

Medium Alert ID: 29676 First Published: 2013 June 17 12:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an important document for the recipient. The text in the email message attempts to convince the recipient to open...

Debian DSA-2708-1 : fail2ban - denial of service

Krzysztof Katowicz-Kowalewski discovered a vulnerability in Fail2ban, a log monitoring and system which can act on attack by preventing hosts to connect to specified services using the local firewall. When using Fail2ban to monitor Apache logs, improper input validation in log parsing could enabl...

[SECURITY] [DSA 2708-1] fail2ban security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2708-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez June 16, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2708-1 (fail2ban - denial of service)

Krzysztof Katowicz-Kowalewski discovered a vulnerability in Fail2ban, a log monitoring and system which can act on attack by preventing hosts to connect to specified services using the local firewall. When using Fail2ban to monitor Apache logs, improper input validation in log parsing could enabl...

DSA-2708-1 fail2ban - denial of service

Bulletin has no description...

Debian: Security Advisory (DSA-2708-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert: Fake Purchase Order Request Email Messages on June 13, 2013

Low Alert ID: 29666 First Published: 2013 June 14 12:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a new purchase order notification for the recipient. The text in the email message attempts to convince the recipien...

[SECURITY] Fedora 17 Update: nrpe-2.14-3.fc17

Nrpe is a system daemon that will execute various Nagios plugins locally on behalf of a remote monitoring host that uses the checknrpe plugin. Various plugins that can be executed by the daemon are available at: http://sourceforge.net/projects/nagiosplug This package provides the core agent...

_VMware vCenter view is empty

Challenge VMware vCenter state view located in the Veeam for VMware\VMware vCenter folder is empty, though monitoring works fine, and Clusters, Hosts, VM's, etc. are populated in SCOM topology. Cause VMware vCenter in that view is monitored as Windows application inside the guest OS. Solution...