CVE-2014-8532

Unspecified vulnerability in McAfee Network Data Loss Prevention before NDLP before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors, related to partition mounting...

CVE-2014-8523

Cross-site request forgery CSRF vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-8525

McAfee Network Data Loss Prevention NDLP before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie...

CVE-2014-8530

Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of service via unknown vectors, related to simultaneous logins...

CVE-2014-8519

McAfee Network Data Loss Prevention (NDLP)

CVE-2014-8522

CVE-2014-8522 concerns the MySQL database component used by McAfee Network Data Loss Prevention (NDLP). The vulnerability stems from the NDLP deployment permitting unauthenticated access to its MySQL database prior to version 9.3, meaning remote attackers could gain access without credentials. Pu...

CVE-2014-8532

Technical details about CVE-2014-8532 are not publicly available in the provided documents. The records describe an unspecified vulnerability in McAfee NDLP prior to 9.3 but do not specify affected components, root cause, or fixes. Monitor for updates.

War Times Remote Game Server Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13652/info War Times is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied network data prior to copying it into a fixed-size...

Gamespy Software Development Kit CD-Key Validation Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to properly check the length of...

Epic Games Unreal Tournament Server 436.0 Engine Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9840/info A format string vulnerability has been reported to exists in the Unreal Tournament server engine. This issue is due to a failure of the server application to properly sanitize user supplied network data...

Veritas Backup Exec Remote Agent Detection (NDMP)

Network Data Management Protocol NDMP based detection of the Veritas Backup Exec Agent. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Eddie Schwartz of RSA

Eddie Schwartz, CISO of RSA, emphasized the need for enterprises to use the data they have on their networks to help defend against targeted attacks...

TLS response timings can indicate network contents

When Opera receives incorrectly encrypted network data, Opera will detect this, and let the sender know that the data was not understood. Such encrypted error responses are marginally faster than regular responses. An attacker with access to the network, can by replacing network data measure...

[SECURITY] Fedora 16 Update: bacula-5.0.3-33.fc16

Bacula is a set of programs that allow you to manage the backup, recovery, and verification of computer data across a network of different computers. It is based on a client/server architecture and is efficient and relatively easy to use, while offering many advanced storage management features...

DARPA Seeking Help With Targeted Attack Analysis

The networks of government agencies and the military are under constant attack from a variety of sources, and the U.S., like most other countries, relies on those networks to not just run daily operations, but to support missions around the world. In the face of those attacks, the Department of...

CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

SAP Crystal Reports buffer overflow

Buffer overflow on network data parsing...

Fedora Update for bacula FEDORA-2012-10929

Check for the Version of bacula OpenVAS Vulnerability Test Fedora Update for bacula FEDORA-2012-10929 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...