[SECURITY] Fedora 17 Update: php-pecl-radius-1.2.7-1.fc17

This package is based on the libradius of FreeBSD, with some modifications and extensions. This PECL provides full support for RADIUS authentication RFC 2865 and RADIUS accounting RFC 2866, works on Unix and on Windows. Its an easy way to authenticate your users against the user-database of your ...

Atlassian Crowd XXE Vulnerability (CWD-3366) - Active Check

Atlassian Crowd is prone to an XML external entity XXE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Windows 7 SP1 Local Access SYSTEM Compromise

No description provided by source. Discovered by: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Vendor: Microsoft Affected Software: Windows 7 SP1 and probably other Title: Owning Windows 7 - From Recovery to "nt authority\system" - Physical Access Required See also:...

Windows 7 SP1 Local Access SYSTEM Compromise

Discovered by: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Vendor: Microsoft Affected Software: Windows 7 SP1 and probably other Title: Owning Windows 7 - From Recovery to "nt authority\system" - Physical Access Required See also:...

There is no FIB [summary.xml] in the specified restore point

Challenge During a job run or a restore, the following error occurs: There is no FIB summary.xml in the specified restore point. FIB in this error stands for F ile I n B ackup. Cause This error occurs when the file summary.xml is not found within the restore point. This may occur for several...

NetTraveler Attackers Using PRISM Program as Bait

Never let it be said that attackers don’t keep up with the news. The crew behind the NetTraveler cyberespionage attacks is now using the news about the NSA’s PRISM surveillance program as bait in a new spear-phishing campaign. Security researcher Brandon Dixon of 9bplus came across a malicious...

fingerprint_waf

Try to fingerprint the Web Application Firewall that is running on the remote end. Please note that the detection of the WAF is performed by the infrastructure.afd plugin afd stands for Active Filter Detection. Plugin type Infrastructure Options This plugin doesnt have any user configured options...

Caucho Resin <= 4.0.36 Information Disclosure Vulnerability - Active Check

Caucho Resin is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:caucho:resin";...

SolarWinds Log & Event Manager for Log Management and SEIM Security

SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...

SolarWinds Log & Event Manager for Log Management and SEIM Security

SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...

Remote command execution for Ruby Gem ftpd-0.2.1

Remote command execution for Ruby Gem ftpd-0.2.1 2/28/2013 https://github.com/wconrad/ftpd http://rubygems.org/gems/ftpd "ftpd is a pure Ruby FTP server library. It supports implicit and explicit TLS, passive and active mode, and most of the commands specified in RFC 969. It an be used as part of...

Authentication flaw

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password...

CVE-2013-3107

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password...

VMware Security Updates for vCenter Server (VMSA-2013-0006)

The version of VMware vCenter installed on the remote host is 5.1 prior to update 1. It therefore is potentially affected by the following vulnerabilities : - When deployed in an environment that uses Active Directory with anonymous LDAP binding enabled, VMware vCenter doesn't properly handle log...

VMware security updates for vCenter Server

a. vCenter Server AD anonymous LDAP binding credential by-passvCenter Server when deployed in an environment that uses Active Directory AD with anonymous LDAP binding enabled doesn't properly handle login credentials. In this environment, authenticating to vCenter Server with a valid user name an...

Ruby on Rails Active Record 数据类型注入漏洞(CVE-2013-3221)

CVE ID:CVE-2013-3221 Ruby on Rails是一个使用Ruby语言所写的开源网络应用框架。 Ruby on Rails Active Record组件在对数据库列中输入值和存储值进行比较时，没有确保使用该数据库列所声明的数据类型，允许远程攻击者比较容易的通过特殊值对Ruby on Rails应用程序进行数据类型注入的攻击。如可通过"typed XML"特和Mysql数据库特殊的交互来利用此漏洞。 0 Ruby on Rails 2.3.x Ruby on Rails 3.0.x Ruby on Rails 3.1.x Ruby on Rails 3.2.x...

VMSA-2013-0006:VMware security updates for vCenter Server

VMSA-2013-0006.1 VMware security updates for vCenter Server VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2013-0006.1 VMware Security Advisory Synopsis: VMware security updates for vCenter Server VMware Security Advisory Issue date: 2013-04-25 VMware Security Advisory Update...

CVE-2013-3221

The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attack...

CVE-2013-3221

The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attack...

DEBIAN-CVE-2013-3221

The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3.1.x, and 3.2.x does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for remote attackers to conduct data-type injection attack...