CGI Generic Fragile Parameters Detection (potential)

A web application hosted on the remote service returned 50x response codes when discovered CGIs were called with invalid values. These codes may have several origins : - A web application firewall or another defense mechanism may abruptly interrupt the request. - There could be a transient web...

The GNU C library dynamic linker expands $ORIGIN in setuid library search path

The GNU C library dynamic linker expands $ORIGIN in setuid library search path ------------------------------------------------------------------------------ Gruezi, This is CVE-2010-3847. The dynamic linker or dynamic loader is responsible for the runtime linking of dynamically linked programs...

Fedora Update for sssd FEDORA-2010-13557

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2010-13557 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for sssd FEDORA-2010-13549

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2010-13549 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

[SECURITY] Fedora 13 Update: sssd-1.2.2-21.fc13

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 12 Update: sssd-1.2.2-20.fc12

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 14 Update: sssd-1.3.0-30.fc14

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

oracle-brute NSE Script

Performs brute force password auditing against Oracle servers. Running it in default mode it performs an audit against a list of common Oracle usernames and passwords. The mode can be changed by supplying the argument oracle-brute.nodefault at which point the script will use the username- and...

domcon-brute NSE Script

Performs brute force password auditing against the Lotus Domino Console. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the creds library. brute.credfile,...

informix-brute NSE Script

Performs brute force password auditing against IBM Informix Dynamic Server. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the creds library. brute.credfile,...

http-brute NSE Script

Performs brute force password auditing against http basic, digest and ntlm authentication. This script uses the unpwdb and brute libraries to perform password guessing. Any successful guesses are stored in the nmap registry, using the creds library, for other scripts to use. Script Arguments...

svn-brute NSE Script

Performs brute force password auditing against Subversion source code control servers. Script Arguments svn-brute.repo the Subversion repository against which to perform password guessing svn-brute.force force password guessing when service is accessible both anonymously and through authenticatio...

vnc-brute NSE Script

Performs brute force password auditing against VNC servers. See also: realvnc-auth-bypass.nse Script Arguments vnc-brute.bruteusers If set, allows the script to iterate over usernames for auth types that require it plain, Apple Remote Desktop 30, SASL not supported, and ATEN Default: false, since...

New Certifications Will Set High Bar for IT Security Pros

A new non-profit group is developing certifications for information technology security professionals that will set a high bar for IT security practitioners in areas like penetration testing, code auditing and control systems operation. The National Board of Information Security Examiners NBISE i...

CVE-2010-1973

Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors...

CVE-2010-1973

Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Auditing subsystem in HP OpenVMS 8.3, 8.2, 7.3-2, and earlier on the ALPHA platform, and 8.3-1H1, 8.3, 8.2-1, and earlier on the Itanium platform, allows local users to gain privileges or obtain sensitive information via unknown vectors...

CVE-2010-1973

CVE-2010-1973 affects HP OpenVMS (ALPHA: 7.3-2, 8.2, 8.3; Itanium: 8.2-1, 8.3-1H1, 8.3) in the Auditing subsystem. The vulnerability allows local users to gain privileges or obtain sensitive information via unknown vectors. HP’s Security Bulletin HPSBOV02539 lists potential local information disc...

Bouncing RPC

In the early years of Core Security Technologies, the company not only offered security consulting services, but often was sub-contracted to do R+D for several security vendors. The first and most intellectually rewarding of such contracts came from Secure Networks Inc. SNI, a Canadian start-up...

[security bulletin] HPSBOV02539 SSRT090267 rev.1 - HP OpenVMS Auditing, Local Information Disclosure, Elevation of Privilege, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02227261 Version: 1 HPSBOV02539 SSRT090267 rev.1 - HP OpenVMS Auditing, Local Information Disclosure, Elevation of Privilege, Denial of Service DoS NOTICE: The information in this Security Bullet...