Threat Outbreak Alert: Fake Parking Charge Payment Notice Email Messages on May 15, 2014

Medium Alert ID: 34243 First Published: 2014 May 15 15:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a parking violation payment notice for the recipient. The text in the email message attempts to convince the...

Cisco IOS Software and IOS XE Software LISP Denial of Service Vulnerability

A vulnerability in Locator/ID Separation Protocol LISP control message processing in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a vulnerable device to disable Cisco Express Forwarding and eventually drop traffic passing through. The...

Threat Outbreak Alert: Fake Shipment Delivery Failure Notification Email Messages on May 14, 2014

Medium Alert ID: 34229 First Published: 2014 May 14 15:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipment delivery notification for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Court Apperance Notice Email Messages on May 13, 2014

Medium Alert ID: 34172 First Published: 2014 May 8 20:44 GMT Last Updated: 2014 May 14 13:17 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a court appearance notice for the recipient. The text in the email message...

Cisco Broadcast Access Center for Telco and Wireless Cross-Site Scripting Vulnerability

A vulnerability in the web framework of the Cisco Broadcast Access Center for Telco and Wireless BAC-TW could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the Cisco BAC-TW web interface. The vulnerability is due to insufficient input...

Cisco Broadcast Access Center for Telco and Wireless Cross-Site Request Forgery Vulnerability

A vulnerability in the web framework of the Cisco Broadcast Access Center for Telco and Wireless BAC-TW could allow an unauthenticated, remote attacker to perform a cross-site request forgery CSRF attack against the Cisco BAC-TW web interface. The vulnerability is due to insufficient CSRF...

Cisco Nexus 7000 Denial of Service Vulnerability

A vulnerability in Cisco Nexus 7000 Series Switches could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to an error in input validation for the sed command. An attacker could exploit this vulnerability by passing...

Threat Outbreak Alert: Fake Court Notice Attachment Notification Email Messages on May 3, 2014

Medium Alert ID: 34101 First Published: 2014 May 5 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain court a notice attachment for the recipient. The email message attempts to convince the recipient to open the...

[security bulletin] HPSBMU03025 rev.1 - HP Diagnostics running OpenSSL, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04267775 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04267775 Version: 1 HPSBMU03025 rev....

(RHSA-2014:0463) Low: Red Hat Enterprise Linux OpenStack Platform 3.0 - 90 Day Retirement Notice

In accordance with the Red Hat Enterprise Linux OpenStack Platform Support Policy, the one-year life cycle of Production Support for version 3 will end on July 31, 2014. On August 1, 2014, Red Hat Enterprise Linux OpenStack Platform version 3 will enter an inactive state and will no longer receiv...

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

A vulnerability in Document Management of Cisco Unified Contact Center Express could allow an authenticated, remote attacker to upload files to arbitrary locations on the filesystem. The vulnerability is due to insufficient parameter validation. An attacker could exploit this vulnerability by...

Cisco Adaptive Security Appliance DHCPv6 Denial of Service Vulnerability

A vulnerability in the DHCP code of Cisco ASA Software could allow an unauthenticated, adjacent attacker to cause the reload of an affected system. The vulnerability is due to insufficient validation of crafted or malformed DHCP version 6 DHCPv6 packets when DHCPv6 replay feature is enabled. An...

Cisco Unified Communications Manager Arbitrary File Read Vulnerability

A vulnerability in the command-line interface CLI of Cisco Unified Communications Manager Cisco UCM could allow an authenticated, local attacker to read the contents of arbitrary files. The vulnerability is due to incomplete input validation. An attacker could exploit this vulnerability by issuin...

Cisco Unified Communications Manager CDR Management Vulnerability

A vulnerability in Call Detail Records CDR Management of Cisco Unified Communications Manager Cisco Unified CM could allow an authenticated, remote attacker to acquire sensitive information. The vulnerability is due to extraneous information included in the web page. An attacker could exploit thi...

Threat Outbreak Alert: Fake Payment Overdue Notice Email Messages on April 23, 2014

Medium Alert ID: 33912 First Published: 2014 April 23 20:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment overdue notice for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Inheritance Notice Email Messages on April 21, 2014

Medium Alert ID: 33867 First Published: 2014 April 21 17:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an inheritance notice for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Account Transfer Notice Email Messages on April 14, 2014

Medium Alert ID: 33797 First Published: 2014 April 14 19:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account transfer notice for the recipient. The text in the email message attempts to convince the recipient t...

Cisco ONS 15454 Controller Card Denial of Service Vulnerability

A vulnerability in the code of the Cisco ONS 15454 Controller Cards could allow an unauthenticated, remote attacker to cause the control card to reset. The vulnerability is due to improper instructions to reload the controller card. A CAL pipe fails to open when the file descriptors are exhausted...

Cisco ONS 15454 Controller Card Denial of Service Vulnerability

A vulnerability in the code of the Cisco ONS 15454 Controller Cards could allow an unauthenticated, remote attacker to prevent system access to the flash memory on the control card. The vulnerability is caused when the file descriptors are exhausted during a FIN attack. An attacker could exploit...

Cisco ONS 15454 Controller Card Denial of Service Vulnerability

A vulnerability in the web interface of Cisco ONS15454 controller cards could allow an unauthenticated, remote attacker to cause the control card to reset. The vulnerability is due to incorrect parsing of the HTTP URI. An attacker could exploit this vulnerability by sending specific HTTP requests...