SUSE SLES10 Security Update : IBM Java (SUSE-SU-2015:1085-1) (Bar Mitzvah) (FREAK)

IBM Java 1.5.0 was updated to SR16-FP10 fixing security issues and bugs. Tabulated information can be found on: http://www.ibm.com/developerworks/java/jdk/alerts/IB MSecurityUpdateMay2015 CVE-2015-0192 CVE-2015-2808 CVE-2015-1914 CVE-2015-0138 CVE-2015-0491 CVE-2015-0459 CVE-2015-0469 CVE-2015-04...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2015:1071-1)

The SUSE Linux Enterprise 12 kernel was updated to version 3.12.43 to receive various security and bugfixes. Following security bugs were fixed : - CVE-2014-3647: arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 did not properly perform RIP changes, which allowed gue...

Stegoloader Malware Uses Steganography to Hide Itself

Malware writers aren’t hesitant to do what it takes to protect a campaign and keep it hidden from detection technologies and security researchers. The group behind the Stegoloader malware, disclosed Monday by researchers at Dell SecureWorks, has taken to digital steganography to keep its...

VMware Player 6.x < 6.0.6 RPC Command DoS (VMSA-2015-0004) (Linux)

The version of VMware Player installed on the remote Linux host is 6.x prior to 6.0.6. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input to a remote procedure call RPC command. An unauthenticated, remote attacker can exploit this, vi...

icmpsh - Simple Reverse ICMP Shell

Sometimes, network administrators make the penetration tester's life harder. Some of them do use firewalls for what they are meant to, surprisingly! Allowing traffic only onto known machines, ports and services ingress filtering and setting strong egress access control lists is one of these cases...

Duqu 2.0 Attackers Used Stolen Foxconn Certificate to Sign Driver

The attackers behind the recently disclosed Duqu 2.0 APT have used stolen digital certificates to help sneak their malware past security defenses, and one of the certificates used in the attacks was issued to Foxconn, the Chinese company that manufactures products for Apple, BlackBerry, Dell, and...

Fedora 20 : libreswan-3.13-1.fc20 (2015-9388)

Updated to 3.13 for CVE-2015-3204 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora 21 : xen-4.4.2-5.fc21 (2015-9466)

Potential unintended writes to host MSI message data field via qemu XSA-128, CVE-2015-4103, PCI MSI mask bits inadvertently exposed to guests XSA-129, CVE-2015-4104, Guest triggerable qemu MSI-X pass-through error messages XSA-130, CVE-2015-4105, Unmediated PCI register access in qemu XSA-131,...

[SECURITY] Fedora 20 Update: nss-util-3.19.1-1.0.fc20

Utilities for Network Security Services and the Softoken module...

[SECURITY] Fedora 20 Update: nss-3.19.1-1.0.fc20

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

IT Security – Do it the hard or easy way!

Whether you are a one-stop-shop IT guy or a network admin on a large IT team you owe it to yourself to learn about Security Information and Event Management SIEM technology. Why? SIEM lets you correlate between events recorded in different logs for related systems. This is significant because...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1042-1)

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed : - CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 - CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

SUSE SLED11 / SLES11 Security Update : FUSE (SUSE-SU-2015:1024-1)

This update for FUSE fixes the following security issue : CVE-2015-3202: FUSE did not clear the environment upon execution of external programs. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

Fedora 21 : python-tornado-3.2.2-1.fc21 (2015-8606)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2633-1)

Wen Xu discovered a use-after-free flaw in the Linux kernel's ipv4 ping support. A local user could exploit this flaw to cause a denial of service system crash or gain administrative privileges on the system. CVE-2015-3636 A memory corruption flaw was discovered in the Linux kernel's scsi...

Fedora 22 : python-tornado-3.2.2-1.fc22 (2015-9143)

Security fixes The XSRF token is now encoded with a random mask on each request. This makes it safe to include in compressed pages without being vulnerable to the BREACH attack. This applies to most applications that use both the xsrfcookies and gzip options or have gzip applied by a proxy...

Threat Outbreak Alert RuleID15812: Email Messages Distributing Malicious Software on June 9, 2015

Medium Alert ID: 39259 First Published: 2015 June 9 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15812 may contain the following files: Name | Size...

Debian DLA-238-1 : fuse security update

Tavis Ormandy discovered that FUSE, a Filesystem in USErspace, does not scrub the environment before executing mount or umount with elevated privileges. A local user can take advantage of this flaw to overwrite arbitrary files and gain elevated privileges by accessing debugging features via the...

D-Link DSL-2780B DLink_1.01.14 - Remote DNS Change

D-Link DSL-2780B DLink1.01.14 - Remote DNS Change D-Link DSL-2780B DLink1.01.14 Unauthenticated Remote DNS Change Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg No description for morons, script kiddies & noobs !! Disclaimer: This or previous...

SUSE SLES12 Security Update : docker (SUSE-SU-2015:0984-1)

The Linux container runtime environment Docker was updated to version 1.6.2 to fix several security and non-security issues. - Security : - Fix read/write /proc paths. CVE-2015-3630 - Prohibit VOLUME /proc and VOLUME /. CVE-2015-3631 - Fix opening of file-descriptor 1. CVE-2015-3627 - Fix symlink...