318 matches found
GitHub Hit With DDoS Attack
A large-scale DDoS attack, apparently emanating from China, has been hammering the servers at GitHub over the course of the last 12 hours, periodically causing service outages at the code-sharing and collaboration site. The attack appears to have begun around 2 AM UTC on Friday and has been going...
DDoS Attack Takes Down DNS Provider Network Solutions
A distributed denial of service attack knocked the website of the domain name registrar Network Solutions LLC offline this morning and affected an unknown number of its clientsā sites as well. Network Solutions announced on its Facebook page that it was experiencing a DDoS attack just before 11...
Code injection
Cisco Unified Communications Manager CUCM 8.6 before 8.62asu2, 8.6 BE3k before 8.64 BE3k, and 9.x before 9.01 allows remote attackers to cause a denial of service CPU consumption and GUI and voice outages via malformed packets to unused UDP ports, aka Bug ID CSCtx43337...
Bank of America Website under Cyber Attack from Islamic Hackers
Bank of America's website experienced periodic outages Tuesday due to cyber attacks launched in retaliation for "Innocence of Muslims," the amateurish film whose mocking portrait of the Prophet Muhammad has incited deadly riots throughout the Middle East. "Cyber fighters of Izz ad-din Al qassam"...
Al-Qaeda websites hacked and remains down for past 12 days
Al-Qaeda websites hacked and remains down for past 12 days Al-Qaeda's main internet forums have been offline for the past 12 days in the longest sustained outages of the sites since they began operating. Several online forums frequently visited by al-Qaeda operatives were downed over the course o...
Hackers Hit Alabama, Mexican Government Websites
Hackers with Anonymous have taken credit for targeting government websites for Alabama and Mexico. The group claimed Friday to have hacked several Alabama police and government servers and stolen personal information on more than 46,000 people, including social security numbers, license plate...
FreeBSD : fetchmail -- STARTTLS denial of service (f7d838f2-9039-11e0-a051-080027ef73ec)
Matthias Andree reports : Fetchmail version 5.9.9 introduced STLS support for POP3, version 6.0.0 added STARTTLS for IMAP. However, the actual STARTTLS-initiated in-band SSL/TLS negotiation was not guarded by a timeout. Depending on the operating system defaults as to TCP stream keepalive mode,...
WordPress DDoS Attacks Primarily From China !
After recovering from the largest Distributed Denial of Service attack in the service's history "multiple Gigabits per second and tens of millions of packets per second" yesterday morning, blog host WordPress.com was attacked again very early this morning, finally stabilizing its service at 11:15...
Libyan authorities restrict internet access !
The Libyan government could pull the plug on the country's internet as protests sweep the country. On Friday and Saturday night the country experienced a near black-out, with continued patchy access this week, according to a Google Transparency Report. Libya has had periods of partial or total...
Expert Advises Caution on SCADA Security Hysteria
TORONTOāThe months-long hysteria over Stuxnet and its hyper-sophistication and passel of unknown vulnerabilities has had the effect of creating a secondary wave of panic about the vulnerability of industrial control and SCADA systems. But the concern about spontaneous utility outages and...
CVE-2010-3697
The waitforchildtodie function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service daemon crash by sending many requests...
Large DDoS Attacks Still a Serious Problem
In the world of botnets and denial-of-service attacks, 2009 was a very interesting year. While a handful of large, noisy botnets got most of the attention, there were thousands of serious, prolonged DDoS attacks that not only chewed up huge amounts of bandwidth but likely caused major problems fo...
Ubuntu 6.06 LTS / 7.10 : gnome-screensaver vulnerabilities (USN-669-1)
It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...
Ubuntu: Security Advisory (USN-669-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu Update for gnome-screensaver vulnerabilities USN-669-1
Ubuntu Update for Linux kernel vulnerabilities USN-669-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6691.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for gnome-screensaver vulnerabilities USN-669-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
USN-669-1: gnome-screensaver vulnerabilities
It was discovered that the notify feature in gnome-screensaver could let a local attacker read the clipboard contents of a locked session by using Ctrl-V. CVE-2007-6389 Alan Matsuoka discovered that gnome-screensaver did not properly handle network outages when using a remote authentication...
Cisco IOS vulnerable to DoS via unrecognized transitive attribute in BGP UPDATE
Overview There is a denial-of-service vulnerability in several specific but common configurations of Cisco IOS. Description There is a problem involving BGP updates on Cisco routers with BGP4 Prefix Filtering and Inbound Route Maps enabled. A route update with an unrecognized transitive attribute...
