RedHat Update for qemu-kvm RHSA-2011:1777-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Offensive Research Continuing to Advance

MIAMI BEACH–It’s the accepted wisdom these days that many of the traditional security defenses organizations depend on just aren’t effective at deterring attackers. But this glosses over the fact that the last few years have included some major advances in defensive technologies, including the...

Researchers Find Sykipot Trojan Variant For Hijacking DoD Smart Cards

A report from Alien Vault says that variants of the Sykipot Trojan have been found that can steal DOD smartcard credentials. The research, published in a blog post Thursday, is the latest by Alien Vault to look at Sykipot, a Trojan horse program known to be used in targeted attacks against defens...

qemu security update

CentOS Errata and Security Advisory CESA-2011:1777 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

qemu security update

CentOS Errata and Security Advisory CESA-2011:1801 Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability...

Important: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Important: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

U.S. Playing Catch Up in Security for Contactless Devices

AMHERST, MASS.– The U.S. may boast the world’s largest economy, richest technology companies and a lion’s share of its top research universities. But when it comes to the subject of security of RFID Radio Frequency ID and other contactless technologies, America is still playing catch-up. The U.S....

openSUSE Security Update : libpcsclite1 (openSUSE-SU-2011:0092-1)

An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 and CVE-2010-4531 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

USN-1125-1: PCSC-Lite vulnerability

Rafael Dominguez Vega discovered that PCSC-Lite incorrectly handled smart cards with malformed ATR messages. An attacker having physical access could exploit this with a special smart card and cause a denial of service or execute arbitrary code...

SuSE 10 Security Update : pcsc-lite (ZYPP Patch Number 7298)

A buffer overflow in pcsc-lite while handling smart card responses has been fixed. CVE-2010-4531 has been assigned to this issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 11.1 Security Update : pcsc-lite (SAT Patch Number 3889)

An integer overflow in pcsc-ccid and a buffer overflow in pcsc-lite while handling smart card responses have been fixed. CVE-2010-4530 / CVE-2010-4531 have been assigned to these issues. Additionally a new device ID for card readers was added. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Debian DSA-2156-1 : pcscd - buffer overflow

MWR InfoSecurity identified a buffer overflow in pcscd, middleware to access a smart card via PC/SC, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

OpenSC < 0.12.0 Smart Card Serial Number Multiple Buffer Overflow Vulnerabilities - Windows

OpenSC is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA-2156-1] pcscd security update

------------------------------------------------------------------------ Debian Security Advisory DSA-2156-1 [email protected] http://www.debian.org/security/ Steve Kemp January 31, 2011 http://www.debian.org/security/faq -...

DSA-2156-1 pcsc-lite - buffer overflow

Bulletin has no description...

Mandriva Linux Security Advisory : pcsc-lite (MDVSA-2011:015)

A vulnerability has been found and corrected in pcsc-lite : Stack-based buffer overflow in the ATRDecodeAtr function in the Answer-to-Reset ATR Handler atrhandler.c for pcscd in PCSC-Lite 1.5.3, and possibly other 1.5.x and 1.6.x versions, allows physically proximate attackers to cause a denial o...

Mandriva Linux Security Advisory : opensc (MDVSA-2011:011)

A vulnerability has been found and corrected in opensc : Multiple stack-based buffer overflows in libopensc in OpenSC 0.11.13 and earlier allow physically proximate attackers to execute arbitrary code via a long serial-number field on a smart card, related to 1 card-acos5.c, 2 card-atrust-acos.c,...

OpenSC / PCSC-Lite library buffer overflow

Buffer overflow on oversized smart card serial number...

[ MDVSA-2011:015 ] pcsc-lite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:015 http://www.mandriva.com/security/ Package : pcsc-lite Date : January 20, 2011 Affected: 2009.0, 2010.0, 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: A vulnerability has been found an...