Flaw in OS X Lion Encryption Leaves User Credentials in Plaintext

There’s a serious weakness in certain versions of Apple OS X that causes the operating system to store users’ login credentials for the FileVault encrypted storage in plaintext. The bug, which is found in older versions of FileVault present on OS X Lion 10.7.3 systems, enables anyone with admin...

[security bulletin] HPSBPV02754 SSRT100803 rev.1 - HP ProCurve 5400 zl Switch, Compact flash card virus

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03249176 Version: 1 HPSBPV02754 SSRT100803 rev.1 - HP ProCurve 5400 zl Switch, Compact flash card virus NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2012-1802

CVE-2012-1802 affects Siemens Scalance X Industrial Ethernet switches (X414-3E, X308-2M, X-300EEC, XR-300, X-300) where the embedded web server can overflow the buffer via a malformed URL. Root cause: improper URL sanitization leading to a memory overflow (CWE-119). Impacts: remote denial of serv...

Switch your SIM

Rather than carrying your SIM and the data it contains, consider buying a temporary SIM once you arrive at your destination. Many airports have kiosks that sell prepaid SIM cards that are inexpensive and come with prepaid data and minutes. They’re perfect for traveling executives, won’t give an...

Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability Advisory ID: cisco-sa-20120328-smartinstall Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT...

CVE-2012-1838

CVE-2012-1838 affects the LG-Nortel ELO GS24M switch. The web management interface allows remote attackers to bypass authentication and access cleartext credentials and configuration information by directly requesting a configuration web page. This is reflected in the NVD entry (base score 5.0, C...

CVE-2012-1838: Improper Authentication

The web management interface on the LG-Nortel ELO GS24M switch allows remote attackers to bypass authentication, and consequently obtain cleartext credential and configuration information, via a direct request to a configuration web page...

Enterasys SecureStack Switch crossite scripting

Stored XSS in different configuration parameters...

Oracle Exadata Infiniband Switch security vulnerabilities

Default accounts, /conf/shadow file weak permissions...

Oracle Exadata Infiniband Switch default logins and world readable shadow file

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Bugtraq List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both data...

Oracle Exadata Infiniband Switch Default Logins / Poor Configuration

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Full-Disclosure List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both da...

Enterasys SecureStack Switch 6.x Cross Site Scripting

Title: ====== Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities Date: ===== 2012-03-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=443 VL-ID: ===== 443 Introduction: ============= The Enterasys C5 is a scalable, high-performance Gigabit Ethernet switch...

Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities

Document Title: =============== Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=443 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ===================================...

Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities

Document Title: =============== Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=443 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ===================================...

CVE-2012-1085

Unspecified vulnerability in the BE User Switch beuserswitch extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the BE User Switch beuserswitch extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1085

Technical details about CVE-2012-1085 are not provided in the supplied documents beyond a generic description of an unspecified vulnerability in the TYPO3 BE User Switch extension; monitor for updates.

CVE-2012-1085

Unspecified vulnerability in the BE User Switch beuserswitch extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-1084

The CVE-2012-1084 entry concerns TYPO3’s BE User Switch (beuserswitch) extension version 0.0.1, where an XSS vulnerability could allow remote attackers to inject arbitrary script or HTML via unspecified vectors. The available documents identify the affected software and vulnerability type but do ...

PT-2012-3072

Name of the Vulnerable Software and Affected Versions BE User Switch extension version 0.0.1 for TYPO3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors,...