Samba Badlock Vulnerability

The version of Samba, a CIFS/SMB server for Linux and Unix, running on the remote host is affected by a flaw, known as Badlock, that exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD protocols due to improper authentication level negotiation over Remote...

MS16-047: Description of the security update for SAM and LSAD remote protocols: April 12, 2016

None None...

MS16-047: Security update for SAM and LSAD remote protocols: April 12, 2016

Resolves a vulnerability in the SAM and LSAD remote protocols. The vulnerability could allow an attacker to gain access to the SAM database.Summary An elevation of privilege vulnerability exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD remote protocols...

RHEL 6 : bind (RHSA-2016:0601)

"The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2016:0601 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named C...

[SECURITY] Fedora 24 Update: nodejs-node-stringprep-0.7.3-9.fc24

This module exposes predefined Unicode normalization functions that are required by many protocols. This is just a binding to ICU, which is said to be fast...

[SECURITY] Fedora 22 Update: vtun-3.0.3-15.fc22

VTun provides a method for creating Virtual Tunnels over TCP/IP networks and allows one to shape, compress, and encrypt traffic in those tunnels. Supported types of tunnels are: PPP, IP, Ethernet and most other serial protocols and programs. VTun is easily and highly configurable: it can be used...

[SECURITY] Fedora 22 Update: bind-9.10.3-9.P4.fc22

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Open Source GPS Tracking System: Traccar

Traccar is an open source GPS tracking system for various GPS tracking devices. This Maven Project is written in Java and works on most platforms with installed Java Runtime Environment. System supports more than 80 different communication protocols from popular vendors. It includes web interface...

Wago Shell

Added: 03/31/2016 Background Wago PLCs are used in Factory and building automation. Wago ethernet PLCs are connected by IP and can be administered remotely. Problem Wago PLC devices use CoDeSyS protocols to program the device. If the programming ports are left open an attacker is able to upload,...

Wago Shell

Added: 03/31/2016 Background Wago PLCs are used in Factory and building automation. Wago ethernet PLCs are connected by IP and can be administered remotely. Problem Wago PLC devices use CoDeSyS protocols to program the device. If the programming ports are left open an attacker is able to upload,...

Wago Shell

Added: 03/31/2016 Background Wago PLCs are used in Factory and building automation. Wago ethernet PLCs are connected by IP and can be administered remotely. Problem Wago PLC devices use CoDeSyS protocols to program the device. If the programming ports are left open an attacker is able to upload,...

Big-Name Law Firms Fall Victim To Hackers

Wall Street-savvy hackers are behind a data breach that involves a who’s-who of New York City legal firms. Federal investigators are looking into the breach that included Cravath Swaine & Moore LLP and Weil Gotshal & Manges LLP, both high-profile New York-based law firms. Cravath Swaine & Moore...

[SECURITY] Fedora 24 Update: bind99-9.9.8-4.P4.fc24

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. This package set contains only export version of BIND libraries, that are used for building ISC DHCP...

CentOS Update for bind97 CESA-2016:0458 centos5

Check the version of bind97 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882424";...

PT-2021-3057

Name of the Vulnerable Software and Affected Versions 802.11 standard affected versions not specified Check Point GAiA affected versions not specified Description The issue concerns a flaw in the authentication procedure of the 802.11 standard, which underlies Wi-Fi Protected Access WPA, WPA2, an...

bind, caching security update

CentOS Errata and Security Advisory CESA-2016:0459 Updated bind packages that fix two security issues are now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base score...

Technical analysis Potato provided the right principle-vulnerability warning-the black bar safety net

! Graphic unrelated 0×0 0 Preface A while ago included a Potato to mention the right tools, find the tools provide the right posture with the conventional tool are not the same, but with WPAD proxy related, so expand the test and analysis, primarily through the analysis of its network traffic to...

Testing TLS/SSL encryption: testssl.sh

testssl.sh is a free command line tool which checks a server’s service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. It’s designed to provide clear output in any case. Testing TLS/SSL encryption: testssl.sh Key features Clear output: you can tell...

OpenSSL DROWN drown vulnerability detection and repair method-vulnerability warning-the black bar safety net

A, vulnerability Description: The now popular server and client to use TLS encryption,SSL and TLS protocols to ensure that users are surfing the Internet,shopping,instant messaging and not be read by third parties. DROWNdrownvulnerabilities allow an attacker to compromise the encryption system,by...

[SECURITY] Fedora 23 Update: openssl-1.0.2g-2.fc23

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...