Debian DSA-2840-1 : srtp - buffer overflow

Fernando Russ from Groundworks Technologies reported a buffer overflow flaw in srtp, Cisco's reference implementation of the Secure Real-time Transport Protocol SRTP, in how the cryptopolicysetfromprofileforrtp function applies cryptographic profiles to an srtppolicy. A remote attacker could...

Fedora Update for libsrtp FEDORA-2013-24155

Check for the Version of libsrtp OpenVAS Vulnerability Test Fedora Update for libsrtp FEDORA-2013-24155 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Linux Performance Monitor: Nmon

Nmon Nigel’s performance Monitor for Linux is another very useful command line utility that can display information about various system resources like cpu, memory, disk, network etc. It was developed at IBM and later released open source. It is available for most common architectures like x86, A...

[SECURITY] Fedora 20 Update: libsrtp-1.4.4-9.20101004cvs.fc20

This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel...

[SECURITY] Fedora 19 Update: libsrtp-1.4.4-9.20101004cvs.fc19

This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel...

[SECURITY] Fedora 18 Update: libsrtp-1.4.4-9.20101004cvs.fc18

This package provides an implementation of the Secure Real-time Transport Protocol SRTP, the Universal Security Transform UST, and a supporting cryptographic kernel...

[Watcher] passive Web-security scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...

[SECURITY] Fedora 18 Update: ganglia-3.6.0-3.fc18

Ganglia is a scalable, real-time monitoring and execution environment with all execution requests and statistics expressed in an open well-defined XML format...

[SECURITY] Fedora 19 Update: ganglia-3.6.0-3.fc19

Ganglia is a scalable, real-time monitoring and execution environment with all execution requests and statistics expressed in an open well-defined XML format...

wireshark: DoS (NULL pointer dereference, crash) in the PROFINET Real-Time dissector (wnpa-sec-2013-53)

The IsDFPFrame function in plugins/profinet/packet-pn-rt.c in the PROFINET Real-Time dissector in Wireshark 1.10.x before 1.10.1 does not validate MAC addresses, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted packet...

wireshark: DoS (infinite loop) in the RTCP dissector (wnpa-sec-2012-38)

REJECTED CVE A denial of service flaw was found in the way RTCP dissector of Wireshark, a network traffic analyzer, performed dissection of certain RTCP packet capture files. A remote attacker could provide a specially-crafted RTCP packet / packet capture that, once processed, would lead to...

Automated Attack, Threat Intelligence Sharing Sought

BOSTON – If you’re looking for tangible information sharing success stories around attack intelligence, some might point to the prompt publishing of indicators of compromise IOC as an example. Security and forensics companies will publish MD5 hashes of malware, IP addresses involved in attacks,...

[SECURITY] Fedora 18 Update: nodejs-0.10.21-1.fc18

Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...

Fedora Update for nodejs FEDORA-2013-19491

Check for the Version of nodejs OpenVAS Vulnerability Test Fedora Update for nodejs FEDORA-2013-19491 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for rtkit FEDORA-2013-17529

Check for the Version of rtkit OpenVAS Vulnerability Test Fedora Update for rtkit FEDORA-2013-17529 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

NSA's Alexander Appeals For Threat Information Sharing

WASHINGTON– While Congress and the technology community are still debating and discussing the intelligence gathering capabilities of NSA revealed in recent months, the agency’s director, Gen. Keith Alexander, is not just defending the use of these existing tools, but is pitching the idea of shari...

[ThreatFactor NSIA v1.0.6] Network System Integrity Analysis

ThreatFactor NSIA is a website scanner that monitors websites in real-time in order to detect defacements, compliance violations, exploits, sensitive information disclosure and other issues. ThreatFactor detects issues remotely and therefore requires no software to install, does not introduce any...

Cisco Unified Communications Manager (CUCM) Web Detection

The web interface for Cisco Unified Communications Manager CUCM was detected. Note: This plugin does not report anything. It only collects version information to be used downstream. C Tenable, Inc. include'compat.inc'; if description scriptid70088; scriptversion"1.9";...

[SECURITY] Fedora 18 Update: graphite-web-0.9.12-1.fc18

Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...

[SECURITY] Fedora 19 Update: graphite-web-0.9.12-1.fc19

Graphite consists of a storage backend and a web-based visualization fronte nd. Client applications send streams of numeric time-series data to the Graphite backend called carbon, where it gets stored in fixed-size database files similar in design to RRD. The web frontend provides user interfaces...