6883 matches found
Apache Tomcat JULI Logging组件默认安全策略漏洞
No description provided by source...
Security Best Practice: Blocking BitTorrent
BitTorrent is a peer to peer file sharing protocol used for distributing large amounts of data. It is one of the most common protocols for transferring large files. The use of BitTorrent may circumvent the organizational security policy...
Security Best Practice: Blocking eMule
eMule is a popular peer to peer file sharing application. The distinguishing features of eMule are the direct exchange of sources between client nodes, fast recovery of corrupted downloads, and the use of a credit system to reward frequent uploaders. The use of eMule may circumvent the...
Security Best Practice: Blocking Gnutella
Gnutella is a popular file sharing network, and one of the most popular Peer to Peer protocols, used by applications such as BearShare, Shareaza, Morpheus and iMesh. File sharing applications are commonly used to exchange MP3 music files, videos, applications, and documents. The use of Gnutella m...
Q&A: Bob Maley on Designing and Implementing a State-wide Security Program
Dennis Fisher: Welcome to the Digital Underground podcast. This is the first episode in what’s going to be a series of podcasts with CSOs from states around the country. We’re going to be discussing the unique challenges of running an InfoSec program in the public sector and what lessons enterpri...
DotNetNuke 4.0 <= 5.1.4 Information Disclosure Vulnerability
DotNetNuke is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Java Runtime Environment AWT setDiffICM buffer overflow
Added: 11/27/2009 CVE: CVE-2009-3869 BID: 36881 OSVDB: 59710 Background Java Runtime Environment JRE allows end users to run Java applications. Problem A buffer overflow vulnerability in the setDiffICM function of the Abstract Window Toolkit AWT allows command execution when a user loads a...
Java Runtime Environment AWT setDiffICM buffer overflow
Added: 11/27/2009 CVE: CVE-2009-3869 BID: 36881 OSVDB: 59710 Background Java Runtime Environment JRE allows end users to run Java applications. Problem A buffer overflow vulnerability in the setDiffICM function of the Abstract Window Toolkit AWT allows command execution when a user loads a...
Mozilla Releases Preview Builds of Firefox with Content Security Policy
Mozilla has released a preview build of Firefox that includes its new Content Security Policy specification, a framework that’s designed to enable site owners to protect against common Web-based attacks. The CSP specification is Mozilla’s effort to provide Web site operators with a simpler way to...
Cisco ACE XML Gateway <= 6.0 Internal IP disclosure
+------------------------------------------------------------------------+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. | |...
Interchange < 5.4.4 / 5.6.2 / 5.7.2 Search Request Information Disclosure
The remote host appears to be running Interchange, an open source application server that handles state management, authentication, session maintenance, click trails, filtering, URL encodings, and security policy. According to the banner in its administrative login page, the installed version of...
CVE-2008-7217
Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and...
Design/Logic Flaw
Microsoft Office 2008 for Mac, when running on Macintosh systems that restrict Office access to administrators, does not enforce this restriction for user ID 502, which allows local users with that ID to bypass intended security policy and access Office programs, related to permissions and...
CVE-2008-7217
Microsoft Office 2008 for Mac is affected by a local-privilege- escalation issue where, on systems that restrict Office access to administrators, user ID 502 can bypass this restriction and access Office programs. The vulnerability is linked to permissions/ownership settings for certain directori...
Open 3 3 8 9 unable to login the 5 types of reasons-vulnerability warning-the black bar safety net
1, The server in the internal network. 2, the tcp/ip filtering. First execute the following cmd command: cmd /c regedit-e c:\1.reg HKEYLOCALMACHINE\SYSTEM\ControlSet001\Services\Tcpip export the registry concerning the TCP/IP filtering in the first place cmd /c regedit-e c:\2.reg...
Mozilla Tackles XSS Vulnerabilities, Clickjacking Attacks
Mozilla’s security engineers are working on new technology that promises to mitigate a large class of Web application vulnerabilities, especially the cross-site scripting XSS plague against modern Web browsers. The project, called Content Security Policy, is designed to shut down XSS attacks by...
Specifically Crafted Archive/Container Files can Bypass Initial Scans
SUMMARY Specifically-crafted archive and container files can potentially bypass initial malware scans in some products. AFFECTED PRODUCTS Products --- Symantec Mail Security for Domino Symantec Mail Security for Microsoft Exchange Symantec Mail Security for SMTP Symantec Brightmail Gateway Symant...
IT staffs pressured to relax Web security
From SearchSecurity.com Rob Westervelt IT managers are under pressure from the top executives in their organizations to relax their policies on Web security in order to make users more productive. A new survey of more than 1,000 IT managers found that sales and marketing personnel also are leanin...
Hathaway, Obama administration swing and miss at RSA
Much of the talk at the RSA Conference last week centered on the lack of the unifying theme or big-time story that usually emerges to take over the show by mid-week. But there was, in fact, a major story, and it was the abject failure of the Obama administration, in the person of Melissa Hathaway...