1889 matches found
Malware Spreading Through Phony FDIC Alerts
There are reports of phony FDIC notification e-mails tricking computers users into installing the ZBot identity-theft Trojan. The e-mails tell the recipients that their banks have filed for bankruptcy and that the banks’ asserts are now under the control of the FDIC. The links offered in the...
CVE-2009-2898
Cross-site scripting XSS vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite AMS 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users t...
SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12461)
The IBM JRE/JDK version 5 was updated to Service Release 10. It fixes a number of bugs and likely also several security issues. As usual IBM does not publish fixed security issues on the release date so a detailed list cannot be given at this time. Please check...
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 6380)
The IBM JRE/JDK version 5 was updated to Service Release 10. It fixes a number of bugs and likely also several security issues. As usual IBM does not publish fixed security issues on the release date so a detailed list cannot be given at this time. Please check...
PHP web alerts, a variety of PHP application\0 filter vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: When the PHP program with the specified PATH, in the PATH of the file Backdoor was added%0 0 can upload any file. Test procedure: NEATPIC PHP directory direct-reading version 1.2.3 This document participants: Vulnerability experiment: Xiaolu,Lilo,SuperHei,Darkness All B...
[Full-disclosure] Drupal Embedded Media Field Module Multiple XSS
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Details of this disclosure are posted at http://lampsecurity.org/drupal-6-embed-media-xss-vulnerability Vendor notified: 5/27/09 Vendor response: see below Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a...
Criminals surfing the Conficker hype
By Georg Wicherski As already reported by F-Secure, criminals are using the Conficker hype to push rogue anti-virus software to computer users. Their solution will sometimes display false alerts on clean systems and try to lure their victims into buying a fake cleaning program for $39.95 from the...
Fedora Update for nagios FEDORA-2008-10323
Check for the Version of nagios OpenVAS Vulnerability Test Fedora Update for nagios FEDORA-2008-10323 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
RedHat Security Advisory RHSA-2009:0016
The remote host is missing updates announced in advisory RHSA-2009:0016. The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...
RedHat Security Advisory RHSA-2009:0015
The remote host is missing updates announced in advisory RHSA-2009:0015. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...
RedHat Security Advisory RHSA-2009:0015
The remote host is missing updates announced in advisory RHSA-2009:0015. The IBM 1.6.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes several vulnerabilities in the IBM Java 2 Runtime Environment and the IBM Java 2 Software...
[SECURITY] Fedora 10 Update: nagios-3.0.5-1.fc10
Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux and some other NIX variants as a background process,...
Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow
|| || ISR || Infobyte Security Research || www.infobyte.com.ar || 07.02.2008 || .:: SUMMARY Novell GroupWise Messenger Client GWIM Remote Stack Overflow Version: 2.0, It is suspected that all previous versions of Groupwise Messenger Client are vulnerable. .:: BACKGROUND Novell GroupWise Messenger...
Nortel SIP多媒体PC客户端会话处理拒绝服务漏洞
Nortel Networks公司推出的SIP多媒体PC客户端是一个功能全面的多媒体即时通讯工具。 SIP多媒体PC客户端没有限制可生成的连接或活动窗口的数量，未经认证的远程攻击者可以创建大量会话，直到系统无法处理，导致耗尽客户端系统上的可用资源。 Nortel Networks 多媒体PC客户端SIP电话 4.x Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-alerts...
RHEL 5 : setroubleshoot (RHSA-2008:0061)
Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...
Novell eDirectory eMBox工具edirutil命令绕过认证漏洞
BUGTRAQ ID: 28441 CVECAN ID: CVE-2008-0926 Novell eDirectory是一个的跨平台的目录服务器。 Novell eDirectory处理访问认证时存在漏洞，远程攻击者可能利用此漏洞获取非授权访问。 可通过/SOAP URL使用Novell...
Novell GroupWise mailto URI处理器缓冲区溢出漏洞
BUGTRAQ ID: 28969 Novell GroupWise是一款跨平台协作软件。 GroupWise处理超长的mailto URL时存在漏洞，如果用户将GroupWise设置为默认的邮件客户端的话，则跟随了超长mailto URI就可以触发缓冲区溢出，导致执行任意指令。 Novell Groupwise 7 Novell ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.novell.com/security-alerts...
[SECURITY] Fedora 7 Update: nagios-plugins-1.4.11-2.fc7
Nagios is a program that will monitor hosts and services on your network, and to email or page you when a problem arises or is resolved. Nagios runs on a Unix server as a background or daemon process, intermittently running checks on various services that you specify. The actual service checks ar...
[SECURITY] Fedora 8 Update: nagios-2.11-3.fc8
Nagios is a program that will monitor hosts and services on your network. It has the ability to send email or page alerts when a problem arises and when a problem is resolved. Nagios is written in C and is designed to run under Linux and some other NIX variants as a background process,...