Now that you have a plan, it’s time to start deploying

This blog is part of a series that responds to common questions we receive from customers about deployment of Microsoft 365 security solutions. In this series, youll find context, answers, and guidance for deployment and driving adoption within your organization. Check out our last blog First...

[SECURITY] Fedora 26 Update: glusterfs-3.10.12-1.fc26

GlusterFS is a distributed file-system capable of scaling to several petabytes. It aggregates various storage bricks over Infiniband RDMA or TCP/IP interconnect into one large parallel network file system. GlusterFS is one of the most sophisticated file systems in terms of features and...

Code injection

IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the...

CVE-2013-4035

IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the...

CVE-2013-4035

IBM Sterling Connect:Direct for OpenVMS 3.4.00, 3.4.01, 3.5.00, 3.6.0, and 3.6.0.1 allow remote attackers to have unspecified impact by leveraging failure to reject client requests for an unencrypted session when used as the server in a TCP/IP session and configured for SSL encryption with the...

CVE-2013-4035

CVE-2013-4035 affects IBM Sterling Connect:Direct for OpenVMS (versions 3.4.00, 3.4.01, 3.5.00, 3.6.0, 3.6.0.1). When the server is in a TCP/IP session and the client requests an unencrypted session, the product may allow an unencrypted session to proceed even if SSL is configured, exposing data....

Release notes for Windows Server 2003 Service Pack 1

Includes the release notes for Windows Server 2003 Service Pack 1.INTRODUCTIONThis article includes the release notes for Microsoft Windows Server 2003 Service Pack 1 SP1.More InformationThe release notes that are included in this article address late-breaking issues that were not addressed in th...

CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x P540 range excluded with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 DNP3oE if an older...

CVE-2018-7758

A denial of service vulnerability exists in Schneider Electric's MiCOM Px4x P540 range excluded with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated could lose network communication in case of TCP/IP open requests on port 20000 DNP3oE if an older...

CVE-2018-7758

The CVE-2018-7758 issue affects Schneider Electric MiCOM Px4x (P540 range excluded) with legacy Ethernet board, MiCOM P540D Range with Legacy Ethernet Board, and MiCOM Px4x Rejuvenated. A denial-of-service condition arises when TCP/IP open requests on port 20000 (DNP3oE) interact with an older TC...

WAGO 750 Series

CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: WAGO Equipment: 750 Series Vulnerability: Improper Resource Shutdown or Release AFFECTED PRODUCTS The following versions of 750 series PLC are affected: 750-880 firmware version 10 and prior, 750-881 firmware version ...

[SECURITY] Fedora 27 Update: nmap-7.60-8.fc27

Nmap is a utility for network exploration or security auditing. It supports ping scanning determine which hosts are up, many port scanning techniques determine what services the hosts are offering, and TCP/IP fingerprinting remote host operating system identification. Nmap also offers flexible ta...

Microsoft SQL Server TCP/IP Listener Product Database Detection

The remote host is running an MSSQL database with default credentials. It may be possible to determine the product associated with the database based on the default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...

Solaris 10 (x86) : 150313-06

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...

Solaris 10 (x86) : 145334-34

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: System management. Supported versions that are affected are 3.3 and 4.1. Easily exploitable vulnerability allows successful authenticated network attacks via TCP/IP. Successful attack of this...

Solaris 10 (sparc) : 150400-10

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Network. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result ...

Solaris 10 (x86) : 125907-02

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: AMD pcnet driver. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability ca...

Solaris 10 (sparc) : 147713-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Library/libc. Supported versions that are affected are 9 and 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in...

Solaris 10 (x86) : 147714-01

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Library/libc. Supported versions that are affected are 9 and 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in...

Solaris 10 (sparc) : 150312-06

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...