CVE-2013-1051

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories...

CVE-2013-1051

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories...

Code injection

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories...

CVE-2013-1051

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories...

CVE-2013-1051

CVE-2013-1051 affects apt versions 0.8.16 and 0.9.7 (and possibly others) through improper handling of InRelease files, enabling man-in-the-middle modification of packages before installation via unknown vectors. The underlying issue relates to repository integrity checks and third‑party reposito...

Ubuntu Update for apt USN-1762-1

Check for the Version of apt OpenVAS Vulnerability Test $Id: gbubuntuUSN17621.nasl 8483 2018-01-22 06:58:04Z teissa $ Ubuntu Update for apt USN-1762-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...

Apt Updater Detection

Binary data 6713.prm...

Ubuntu 11.10 / 12.04 LTS / 12.10 : apt vulnerability (USN-1762-1)

Ansgar Burchardt discovered that APT incorrectly handled InRelease files. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could potentially be used to install altered packages. This update corrects the issue by disabling InRelease file support completely. Please no...

Debian Security Advisory DSA 2647-1 (firebird2.1 - buffer overflow)

A buffer overflow was discovered in the Firebird database server, which could result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2647.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2647-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone...

Ubuntu: Security Advisory (USN-1762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1762-1: APT vulnerability

Ansgar Burchardt discovered that APT incorrectly handled InRelease files. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages. This update corrects the issue by disabling InRelease file support completely. Pleas...

Debian Security Advisory DSA 2635-1 (cfingerd - buffer overflow)

Malcolm Scott discovered a remote-exploitable buffer overflow in the RFC1413 ident client of cfingerd, a configurable finger daemon. This vulnerability was introduced in a previously applied patch to the cfingerd package in 1.4.3-3. OpenVAS Vulnerability Test $Id: deb2635.nasl 6611 2017-07-07...

RSA Conference 2013: Experts Say It's Time to Prepare for a 'Post-Crypto' World

SAN FRANCISCO–In the current climate of continuous attacks and intrusions by APT crews, government-sponsored groups and others organizations, cryptography is becoming less and less important and defenders need to start thinking about new ways to protect data on systems that they assume are...

Mandiant revealed Chinese APT1 Cyber Espionage campaign

Few weeks after the discovery of the sophisticated cyber espionage campaign against principal US media The Mandiant® Intelligence Center™ released an shocking report that reveals an enterprise-scale computer espionage campaign dubbed APT1. The term APT1 is referred to one of the numerous cyber...

Researchers See Spike in Attacks Against Uyghur Users

Researchers have noticed a spike in cyberattacks over the past few weeks targeting the Uyghur people, a Turkic ethnic group based primarily in China and Kazakhstan. The attacks have been exploiting a Microsoft Word vulnerability patched in June 2009, according to a Securelist post by Kaspersky La...

Chinese Government targets Uyghur group by malware attack

An old vulnerability in Word for OS X is being used in increasing levels of attacks, probably government-sponsored hacking programs against Uyghur group, including Tibetans, NGOs and human rights organizations. A number of attacks have been seen directed at the World Uyghur Congress, a Munich-bas...

Chinese Government targets Uyghur group by malware attack

An old vulnerability in Word for OS X is being used in increasing levels of attacks, probably government-sponsored hacking programs against Uyghur group, including Tibetans, NGOs and human rights organizations. A number of attacks have been seen directed at the World Uyghur Congress, a Munich-bas...

Debian Security Advisory DSA 2612-2 (ircd-ratbox - programming error)

It was discovered that a bug in the server capability negotiation code of ircd-ratbox could result in denial of service. OpenVAS Vulnerability Test $Id: deb2612.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2612-2 using nvtgen 1.0 Script version: 2.0 Author: Greenbone...

Debian Security Advisory DSA 2616-1 (nagios3 - buffer overflow in CGI scripts)

A buffer overflow problem has been found in nagios3, a host/service/network monitoring and management system. A malicious client could craft a request to history.cgi and cause application crashes. OpenVAS Vulnerability Test $Id: deb2616.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated fro...

Inside the Targeted Attack on The New York Times

The Chinese group behind the targeted attack on the New York Times was laser focused on accessing the email of a reporter and the newspaper’s former Beijing bureau chief to the point that it used an inordinate number of custom malware samples to get the job done. “In terms of statistics, 45 custo...