Russian firm Elcomsoft unveils tool to crack BlackBerry encryption security

Russian firm Elcomsoft unveils tool to crack BlackBerry encryption security A Russian security company has upgraded a phone-password cracking suite with the ability to figure out the master device password for Research in Motion's BlackBerry devices. Elcomsoft said that before it developed the...

Russian firm Elcomsoft unveils tool to crack BlackBerry encryption security

Russian firm Elcomsoft unveils tool to crack BlackBerry encryption security A Russian security company has upgraded a phone-password cracking suite with the ability to figure out the master device password for Research in Motion's BlackBerry devices. Elcomsoft said that before it developed the...

Barracuda Backup 2.0 Cookie Manipulation

Title: ====== Barracuda Backup v2.0 - Multiple Web Vulnerabilities Date: ===== 2011-09-28 References: =========== Barracuda Backup Application v2.0 VL-ID: ===== 31 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Barracuda Backup Service is a complete a...

shopex密码取回处新生成密码可预测漏洞

简要描述： shopex在找回密码的地方存在一些逻辑设计问题，导致可以预测新生成的密码，可能被用来攻击获取他人密码 详细说明： 相关代码 /core/shop/controller/ctl.passport.php中： function sendPSW $this-begin$this-system-mkUrl'passport','lost'; $member=&$this-system-loadModel'member/member'; $data=$member-getMemberByUser$POST'uname';...

How to perform SureBackup recovery verification manually in Standard edition

Solution To start, use the Instant VM Recovery feature. For a boot up test, go through the Instant Recovery wizard and power on the VM, but do not select a checkbox to connect the VM to a network. Please note that since there is no network connectivity, some applications will not start since they...

New Attack Finds AES Keys Several Times Faster Than Brute Force

A group of researchers have developed a new attack that enables them to find AES keys several times faster than was previously thought possible, reducing the complexity of finding the keys on AES-128, AES-192 and AES-256. However, the attack does not pose any practical threat to currently deploye...

HP Data Protector Backup Client Service GET_FILE Directory Traversal (CVE-2011-1736)

A directory traversal vulnerability has been reported in HP Data Protector's backup client service. HP Data Protector is an automatic data backup and recovery software solution, for applications in both physical and virtual environments. The vulnerability is due to insufficient sanitization in th...

Matriux Krypton security distribution Released

Matriux Krypton security distribution Released The Matriux is a fully featured security distribution consisting of a bunch of powerful, open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network...

Ubuntu 10.04 LTS / 10.10 / 11.04 : ecryptfs-utils vulnerabilities (USN-1188-1)

Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. CVE-2011-1831 Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs...

USN-1188-1: eCryptfs vulnerabilities

Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. CVE-2011-1831 Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs...

CentOS Update for rgmanager CESA-2009:1339 centos5 i386

Check for the Version of rgmanager OpenVAS Vulnerability Test CentOS Update for rgmanager CESA-2009:1339 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CVE-2011-1836

utils/ecryptfs-recover-private in ecryptfs-utils before 90 does not establish a subdirectory with safe permissions, which might allow local users to bypass intended access restrictions via standard filesystem operations during the recovery process...

Incident Response and Recovery May Be the Best Defense

By B.K. DeLong The ever increasing list of breaches appearing on the Open Security Foundation’s DataLossDB Web site as well as companies being targeted by the AntiSec movement made up of groups including recently-raided Anonymous, AnonOps, TeaMp0isoN, and now-dormant LulzSec continues to show tha...

Troubleshooting vPower NFS Datastore Mounting Issues

Challenge During SureBackup, Instant Recovery, Instant Disk Recovery, or Other-OS FLR operation, the following error is seen in the VMware environment: Error during the configuration of the host: NFS Error: Unable to Mount filesystem: Unable to connect to NFS server. or An error occurred during...

Weak Passwords Banned from Hotmail

Microsoft’s email service, Hotmail, is implementing tougher standards for user passwords to combat the increasing occurrence email account hijackings. The company said Hotmail users will no longer be allowed to use common, easily guessable passwords like “password,” “12345,” and “qwerty,” which a...

viaExtract - Forensic tool for Android devices released

viaExtract - Forensic tool for Android devices released Android Forensics is now easier, faster and more powerful than ever. viaForensics has released viaExtract – Android Logical, a powerful analysis and reporting tool for Android smart phones and devices.Expanding on our popular AFLogical...

PayPal vulnerability : Hack any Paypal account within 30 seconds

PayPal vulnerability : Hack any Paypal account within 30 seconds UPDATE : This has been debunked, Paypal accounts are safe. https://thenextweb.com have spoken in depth to Matt Langley, the person who discovered the supposed issue, and it's clear why he assumed there was a serious security breach...

Symantec Backup Exec Server / System Recovery Installed

Symantec System Recovery, formerly Backup Exec Server, a data backup and recovery application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55115; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

Facebook Password Extractor - Get passwords stored in Web browsers

Facebook Password Extractor - Get passwords stored in Web browsers Facebook Password Extractor is a free tool to recover passwords to Facebook accounts that are stored or cached in popular Web browsers. Supporting the latest versions of Microsoft Internet Explorer, Mozilla Firefox, Apple Safari,...

DEBIAN-CVE-2011-1945

The elliptic curve cryptography ECC subsystem in OpenSSL 1.0.0d and earlier, when the Elliptic Curve Digital Signature Algorithm ECDSA is used for the ECDHEECDSA cipher suite, does not properly implement curves over binary fields, which makes it easier for context-dependent attackers to determine...