Reports Point to Credit Card Processor Breach in Europe

The Romanian Banks Association has issued a warning to credit card users in that country to be on the lookout for suspicious charges, after the Agency received notice of a possible breach at European credit card processor.PDF The warning followed a similar notice from CEC Bank on Wednesday that i...

Dell KACE K2000 Appliance database administration account allows arbitrary command execution

Overview The Dell KACE K2000 System Deployment Appliance contains a vulnerability that could allow a remote attacker to execute arbitrary commands on an affected device. Description The Dell KACE K2000 Deployment Appliance is an integrated systems provisioning product for large-scale operating...

Researcher Warns Of Exploitable Hole In Chinese Translation Software NJStar

UPDATE: An independent security researcher has warned officials in Australia, the US and China about a serious, remotely exploitable hole in language translation software that is used by leading corporations, universities and governments. Dillon Beresford said a stack overflow vulnerability in a...

kernel: perf, x86: fix Intel fixed counters base initialization

The x86assignhwevent function in arch/x86/kernel/cpu/perfevent.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values, which allows local users to cause a denial of service panic via the perf program...

KVM / QEMU Guest Detection (credentialed check)

According to its model name, the machine is running on a QEMU virtual processor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56300; scriptversion"$Revision: 1.2 $"; scriptcvsdate"$Date: 2011/11/21 21:29:12 $"; scriptnameenglish:"KVM / QEMU Guest Detection...

Linux /proc/cpuinfo

/proc/cpuinfo could be read. This file provides information on the processor's type and features on Linux systems. TRUSTED...

JBossWS remote Denial of Service

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterpris...

RedHat Update for kernel RHSA-2011:1163-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2011:1163-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

CentOS Update for openoffice.org CESA-2009:1426 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for openoffice.org CESA-2009:1426 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for xml-security-c FEDORA-2011-9494

Check for the Version of xml-security-c OpenVAS Vulnerability Test Fedora Update for xml-security-c FEDORA-2011-9494 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora Update for xml-security-c FEDORA-2011-9501

Check for the Version of xml-security-c OpenVAS Vulnerability Test Fedora Update for xml-security-c FEDORA-2011-9501 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

[SECURITY] Fedora 14 Update: xml-security-c-1.5.1-4.fc14

The xml-security-c library is a C++ implementation of the XML Digital Signa ture specification. The library makes use of the Apache XML project's Xerces-C X ML Parser and Xalan-C XSLT processor. The latter is used for processing XPath and XSLT transforms...

Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability Advisory ID: cisco-sa-20110720-asr9k Revision 1.0 For Public Release 2011 July 20 1600 UTC GMT...

RedHat Update for Red Hat Enterprise Linux 5.7 kernel RHSA-2011:1065-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

kernel security update

CentOS Errata and Security Advisory CESA-2011:0927 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

Linux Kernel 'x86_assign_hw_event()'本地拒绝服务漏洞

Bugtraq ID: 48580 CVE ID：CVE-2011-2521 Linux是一款开放源代码的操作系统。 Linux Kernel 'x86assignhwevent'存在安全漏洞，允许本地攻击者破坏Intel处理器计数器的计算，可导致拒绝服务攻击。 Linux kernel 2.6.38 Linux kernel 2.6.38.6 Linux kernel 2.6.38.4 Linux kernel 2.6.38.3 Linux kernel 2.6.38.2 Linux kernel 2.6.38-rc7 Linux kernel 2.6.38-rc4 Linux...

Head of Russian Payment Processor ChronoPay Arrested

Pavel Vrublevsky, the head of a prominent Russian payment-processing company, ChronoPay, was arrested in Russia on suspicion of hiring someone to launch a denial-of-service attack against one of his company’s main competitors. The arrest is the latest in a series of high-profile actions against...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...