Cisco Patches Denial-of-Services Vulnerability in IMC

US-CERT today released an advisory warning of a vulnerability in Cisco’s Integrated Management Controller IMC. Cisco released an update that patches the security hole. The IMC is a baseboard management controller that oversees embedded servers inside Cisco Unified Computing System E-Series Blade...

Fedora 20 : python-django14-1.4.14-1.fc20 (2014-9788)

update to 1.4.14 fixing CVE-2014-0480 CVE-2014-0481 CVE-2014-0482, CVE-2014-0483 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : thunderbird-enigmail-1.7.2-1.fc19 (2014-9954)

Upstream annoncement : - This is a bugfix release, fixing several major issues found in v1.7. - A security bug CVE-2014-5369 has been fixed. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 19 : python-elixir-0.7.1-14.fc19 (2014-9752)

CVE-2012-2146 The 'actsasencrypted' feature of Elixir does not correctly initialize the random seed for the Blowfish encryption algorithm, and is therefore insecure. This option adds a new optional AES mode which does not suffer this problem, plus a warning is now printed when insecure Blowfish...

Fedora 19 : python-django-1.5.9-1.fc19 (2014-9791)

update to 1.5.9 fixing CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing addition...

USN-2343-1 nss vulnerability

Tyson Smith and Jesse Schwartzentruber discovered that NSS contained a race condition when performing certificate validation. An attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2014-5369

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network...

Linux/x86-64 - Reverse TCP (127.0.0.1:4444/TCP) Shell (/bin/sh) + Password (hell) Shellcode (136 bytes)

Linux/x86-64 - Reverse TCP 127.0.0.1:4444/TCP Shell /bin/sh + Password hell Shellcode 136 bytes. Shellcode exploit for Linuxx86-64 platform ; =================================================================== ; Password Protected Reverse Shell ; Author: SLAE64-1351 Keyman ; Date: 04/09/2014 ; ;...

Microsoft Windows SMB Registry : McAfee EPO GUID

By reading the registry key HKLM\SOFTWARE\Network Associates\ePolicy Orchestrator\Agent, it was possible to determine that the remote Windows system is managed by McAfee EPO. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77477; scriptversion"1.7";...

[SECURITY] Fedora 19 Update: distcc-3.2rc1-4.fc19

distcc is a program to distribute compilation of C or C++ code across several machines on a network. distcc should always generate the same results as a local compile, is simple to install and use, and is often two or more times faster than a local compile...

CVE-2014-2390

Technical details for CVE-2014-2390 are not publicly provided in the supplied connected documents. Based on the initial entry, no specific affected product versions, exploit vectors, or remediation are disclosed here. Monitor for updates.

CVE-2014-2390

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...

CVE-2014-2390: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...

Fedora 20 : perl-Plack-1.0031-1.fc20 (2014-9542)

---------------------------------------------------------------------- ---------- ChangeLog : - Fri Aug 8 2014 Ralf Corsepius - 1.0031-1 - Upstream update. - Thu Jan 16 2014 Ralf Corsepius - 1.0030-3 - Move misplaced %exclude-line from base-package to -Test. - Wed Jan 15 2014 Ralf Corsepius -...

Fedora 19 : subversion-1.7.18-1.fc19 (2014-9521)

This update includes the latest stable release of Apache Subversion 1.7, version 1.7.18, fixing a minor security issue. Client-side bugfixes: - guard against md5 hash collisions when finding cached credentials CVE-2014-3528. See : http://subversion.apache.org/security/CVE-2014-3528-advisory.txt...

Fedora 20 : glibc-2.18-14.fc20 (2014-9824)

Locale names, including those obtained from environment variables LANG and the LC variables, are more tightly checked for proper syntax. setlocale will now fail with EINVAL for locale names that are overly long, contain slashes without starting with a slash, or contain '..' path components...

Community Health data leak suspected of the use of the Heartbleed vulnerability-a vulnerability warning-the black bar safety net

When the Heartbleed OpenSSL vulnerability in 4 months is discovered, the security community many experts are warning that the vulnerability could be used to expose sensitive data, although at the time also there is no evidence that attackers are actively using Heartbleed vulnerability. And now, a...

Fedora 20 : jakarta-commons-httpclient-3.1-15.fc20 (2014-9581)

Security fix for CVE-2014-3577, CVE-2012-6153 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Autodesk SketchBook Pro < 6.2.6 Multiple Overflow Vulnerabilities

The version of Autodesk SketchBook Pro installed on the remote Mac OS X host is prior to 6.2.6. It is, therefore, affected by integer and heap-based buffer overflow vulnerabilities. Using a specially crafted PSD or PXD file, an attacker could cause a denial of service or execute arbitrary code. C...