Securing Your Security Budget: A Failure To Communicate

With increasingly sophisticated exploits and well-informed adversaries targeting systems and data – fighting for more security budget is essential. Too bad, then, that management doesn’t always agree. Why doesn’t management always see the threats same as many security processionals? Maybe the...

Fedora 13 : mod_fcgid-2.3.6-1.fc13 (2010-17434)

This update to the current upstream maintenance release includes a fix for a possible stack buffer overwrite CVE-2010-3872. It also changes the default value of FcgidMaxRequestLen from 1GB to 128K; administrators should change this to an appropriate value based on site requirements. Other changes...

SA-CONTRIB-2010-099 - Views Bulk Operations - Access Bypass

Views Bulk Operations augments Views by allowing bulk operations to be executed on the nodes and users displayed by a view. It does so by showing a checkbox in front of each item, and adding a select box containing operations that can be applied on the selected items. In some circumstances, a...

Husdawg_ LLC. System Requirements Lab - ActiveX Unsafe Method (Metasploit)

$Id: systemrequirementslabunsafe.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 13 : bugzilla-3.4.8-2.fc13 (2010-13086)

Thu Aug 19 2010 Emmanuel Seyman - 3.4.8-2 - Bump to correct changelog version - Wed Aug 18 2010 Emmanuel Seyman - 3.4.8-1 - Update to 3.4.8 623426, 615331 - Only run checksetup if /etc/bugzilla/localconfig does not exist 610210 - Add bugzilla-contrib to Requires 610198 - Wed Jun 30 2010 Emmanuel...

Wireless and Wired Network Interceptor: the Interceptor

The Interceptor is a wireless wired network tap. Basically, a network tap is a way to listen in to network traffic as it flows past. I haven’t done extensive research but all the ones I found when looking passed the copy of the traffic onto a specified wired interface which was then plugged into ...

Fedora Update for kdebase FEDORA-2010-8547

Check for the Version of kdebase OpenVAS Vulnerability Test Fedora Update for kdebase FEDORA-2010-8547 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 11 Update: kdebase-4.4.3-2.fc11.1

Core runtime requirements and applications for KDE 4...

[SECURITY] Fedora 13 Update: kdebase-4.4.3-2.fc13.1

Core runtime requirements and applications for KDE 4...

[SECURITY] Fedora 12 Update: kdebase-4.4.2-1.fc12

Core runtime requirements and applications for KDE 4...

SuSE Security Update: Security update for Tomcat 5 (tomcat5-6841)

This update of tomcat5/6 fixes: CVE-2009-2693: CVSS v2 Base Score: 5.8 CVE-2009-2902: CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. CVE-2009-2901: CVSS v2 Base Score: 4.3 When...

openSUSE Security Update : tomcat6 (tomcat6-2000)

This update of tomcat5/6 fixes : - CVE-2009-2693: CVSS v2 Base Score: 5.8 CVE-2009-2902: CVSS v2 Base Score: 4.3 Directory traversal vulnerability allowed remote attackers to create or overwrite arbitrary files/dirs with a specially crafted WAR file. - CVE-2009-2901: CVSS v2 Base Score: 4.3 When...

CVE-2010-1095

CVE-2010-1095 is an XSS vulnerability in TRUC before or at version 0.11.0, affecting login_reset_password_page.php. The vulnerability allows remote attackers to inject arbitrary script or HTML via the error parameter. This information is sourced from multiple feeds (NVD/Red Hat/OpenVAS entries an...

CVE-2009-4558

The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the 1...

CVE-2009-4558

Affected software: Drupal Image Assist module (modules) versions 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15. Vulnerability: The module does not properly enforce privilege requirements for unspecified page...

CVE-2009-4515

The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node titles via unspecified vectors...

CVE-2009-4526

The CVE-2009-4526 entry affects the Drupal module Print (aka Printer, e-mail and PDF versions), specifically the Send by e-mail sub-module. Affected versions are 5.x before 5.x-4.9 and 6.x before 6.x-1.9. The vulnerability arises from not properly enforcing privilege requirements, allowing remote...

CVE-2009-4515

The Storm module for Drupal (6.x before 6.x-1.25) does not enforce privilege requirements for storminvoiceitem nodes, allowing remote attackers to read node titles via unspecified vectors. This affects confidentiality (partial). No exploit details are provided in the documents. Remediation: upgra...

CVE-2009-4438

The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not enforce privilege requirements for access to a 1 sequence or 2 global-variable object, which allows remote authenticated users to make use of data via unspecified vectors...

IBM DB2 Self Tuning Memory Manager (STMM) DOS Vulnerability (Linux)

The host is installed with IBM DB2 and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodibmdb2stmmdosvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ IBM DB2 Self Tuning Memory Manager STMM DOS Vulnerability Linux Authors: Antu Sanadi Updated By: Antu Sanadi on...