Credit Card Number Cleartext Transmission (Client)

Binary data 5830.prm...

CVE-2011-0442

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

Code injection

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0442

The service utility in EMC Avamar 5.x before 5.0.4 uses cleartext to transmit event details in 1 service requests and 2 e-mail messages, which might allow remote attackers to obtain sensitive information by sniffing the network...

CVE-2011-0442

EMC Avamar 5.x before 5.0.4 transmits event details in cleartext over service requests and internal emails, potentially exposing sensitive customer information to network sniffing. Affected versions include EMC Avamar 5.0.0-407 and later but prior to 5.0.4 (5.0 SP4). Resolution guidance from EMC ...

Gentoo Security Advisory GLSA 201006-06 (transmission)

The remote host is missing updates announced in advisory GLSA 201006-06. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201006-06 (transmission)

The remote host is missing updates announced in advisory GLSA 201006-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Debian: Security Advisory (DSA-2179-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Canonical releases Ubuntu 11.04 Alpha 3 !

As expected, Canonical has released a third alpha for Ubuntu 11.04, code named "Natty Narwhal". This development milestone is the last of three planned alpha releases, which will be followed by two betas – as previously previously reported, there will be no release candidate for Ubuntu 11.04. Nat...

CollabNet ScrumWorks Basic Server transmits credential information in plaintext

Overview Communication between the Collabnet ScrumWorks Basic Server and CollabNet ScrumWorks Desktop Client transmits credential information in plaintext. Description The communication between the CollabNet ScrumWorks Basic Server and CollabNet ScrumWorks Desktop Client is transmitting credentia...

CVE-2009-5051

Hastymail2 pre-RC8 is vulnerable: in HTTPS sessions the session cookie is not marked Secure, enabling potential interception of the cookie in transit. The OpenVAS entries describe a session-cookie security bypass; no concrete exploit details or patch/version fixes are provided in the supplied doc...

Geinimi Trojan targets Android devices !

A data-stealing Trojan affecting Android devices has emerged in China. The Geinimi Trojan sends location co-ordinates, unique device identifiers, and a list of installed apps on the infected device to a remote server. Additionally, it can independently download applications and prompts the user t...

dedecms content administrator daemon download vulnerability and fix-vulnerability warning-the black bar safety net

dedecms in prohibited to upload any file including images when the first script Trojan into a jpg and then transmitted to another station and then use the articles to publish directly to fill in on the picture of the address submitted will automatically put the picturedownloadinto the server and...

kernel: sctp: do not reset the packet during sctp_packet_config

The sctppacketconfig function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attackers to cause a denial of service panic via a certain sequence of SCTP traffic...

JBoss Remoting Denial-Of-Service

The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterpris...

PT-2010-5331 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.37-rc2 Description: The issue is related to the do tcp setsockopt function in the Linux kernel, which does not properly restrict TCP MAXSEG aka MSS values. This allows local users to cause a denial of servic...

Design/Logic Flaw

Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow 1 remote attackers to cause a denial of service invalid write and daemon crash by abruptly disconnecting during transmission of the map from the server, related to network/networkserver.cpp; 2 remote attackers to cause a...

Wells Fargo, BoA Cited For Lax Mobile App Security

Days after publishing a report on serious security lapses in the PayPal mobile payments application for the iPhone, a Chicago firm has released an analysis that finds similar problems in a mobile banking applications by Bank of America and Wells Fargo. The report, published on Thursday by...

NetSupport Manager Gateway transmits identifying information in plaintext

Overview The NetSupport HTTP protocol implementation used for communication between the NetSupport Manager Gateway and NetSupport Manager Controls or NetSupport Manager Clients is not encrypting http headers sent between systems. Description The NetSupport HTTP protocol implementation used for...

nSense-2010-002: Teamspeak 2 Windows client

nSense Vulnerability Research Security Advisory NSENSE-2010-002 --------------------------------------------------------------- t2'10 infosec conference special release http://www.t2.fi --------------------------------------------------------------- Affected Vendor: Teamspeak Systems GmbH Affecte...