CVE-2016-7467

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

How to Configure NetScaler as IDP for SAML Based Integration with 15Five

This article describes how to configure NetScaler as an Identity Service Provider IDP for 15Five SaaS applications, using SAML Security Assertion Markup Language protocol. Introduction 15Five is a company that provides performance management platform that combines employee feedback, objectives...

Backup Copy Seeding and Mapping for Cloud Connect

Objective This article documents how to seed a Backup Copy job for use with a Cloud Repository from a Veeam Cloud Service Provider. Solution Critical Notes Starting with Veeam Backup & Replication v10, there are now two different backup copy modes: Immediate copy and Periodic copy. The mode used ...

F5 Networks BIG-IP : TMM SSO plugin vulnerability (K95444512)

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

How to Deploy and Troubleshoot ADC as a SAML IdP or SP

SAML is an authentication method which allows the Client to authenticate to a trusted third party before accessing protected resources. For a SAML setup, the authenticating party is called the Identity Provider IdP and the resource that the user is trying to access is called the Service Provider...

Description of Update Rollup 2 for System Center 2012 R2 Service Provider Foundation

Description of Update Rollup 2 for System Center 2012 R2 Service Provider Foundation Summary This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 R2 Service Provider Foundation SPF. Additionally, this article contains the installation instructions f...

Update Rollup 8 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 8 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 8 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. It also contains the installation instructions for...

Update Rollup 6 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 6 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. This article also contains the installation...

Update Rollup 9 for System Center 2012 R2 Orchestrator - Service Provider Foundation

Update Rollup 9 for System Center 2012 R2 Orchestrator - Service Provider Foundation Introduction This article describes the issues that are fixed and the features that are added in Update Rollup 9 for Microsoft System Center 2012 R2 Orchestrator - Service Provider Foundation. Additionally, this...

ipsilon: DoS via logging out all open SAML2 sessions

A vulnerability was found in ipsilon in the SAML2 provider's handling of sessions. An attacker able to hit the logout URL could determine what service providers other users are logged in to and terminate their sessions...

LocalTapiola: Email Server Compromised at secure.lahitapiola.fi

Issue The reporter found that the secure email service secure.lahitapiola.fi in the LocalTapiola network had some issues. The reporter found a way to tamper with message data before the message was actually sent out. By utilizing this finding, the reporter was able to send out legitimate looking...

Citrix Gateway VPN Users are Unable to Resolve IPv4 DNS When ISP has IPv6 Enabled

Citrix Gateway VPN users are not able to resolve IPv4 DNS when their ISP has IPv6 enabled...

How to Map Replicas in Cloud Connect

Purpose This KB article documents the procedure for mapping a replication job to a replica that was not created by a tenant's replication job. Cause Use case examples: The tenant has sent backup files to the Service Provider, and the Service Provider restores the VMs from the backup files to crea...

Service Provider Licensing

Challenge Starting with Veeam Backup & Replication 9.0 Update 2, there have been several changes to licensing for service providers. Solution Usage reporting Veeam Backup & Replication 9.0 Update 2 introduced usage reporting by the backup server. This is considered a pilot and does not yet replac...

Cisco Patches DoS Flaw in NCS 6000 Routers

Cisco Systems today released patches for two products, including one for a vulnerability rated a high criticality in Cisco IOS XR for the Cisco Network Convergence System series routers. The flaw rests in the management of system timer resources and could allow an attacker to remotely crash the...

Over 1000 Wendy's Restaurants Hit by Credit Card Hackers

The Popular fast-food restaurant chain Wendy's on Thursday admitted that a massive cyber attack had hit more than 1,000 of its restaurants across the country. The burger chain did not speculate how many people may have been affected, though it did confirm that the hackers were able to steal its...

Resurrection of the Evil Miner

At FireEye Labs, we recently detected the resurgence of a coin mining campaign with a novel and unconventional infection vector in the form of an iFRAME inline frame – an HTML document embedded inside another HTML document on a web page that allows users to get content from another separate sourc...

PT-2016-2172

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions 2012 Gold and R2 Description The issue allows local users to obtain sensitive information from uninitialized memory locations via a crafted application. It is also described as allowing attackers to obtain...

Cisco Cable Modem with Digital Voice Remote Code Execution Vulnerability

A vulnerability in the web server used in the Cisco Cable Modem with Digital Voice Model DPC2203 could allow an unauthenticated, remote attacker to exploit a buffer overflow and cause arbitrary code execution. The vulnerability is due to improper input validation for HTTP requests. An attacker...

Cisco Wireless Residential Gateway with EDVA Denial of Service Vulnerability

A vulnerability in the web-based administration interface of Cisco Model DPQ3925 8x4 DOCSIS 3.0 Wireless Residential Gateway with EDVA could allow an unauthenticated, remote attacker to cause the device to become unresponsive and restart, creating a denial of service DoS condition. The...