CA ARCserve D2D r15 Web Service Servlet Code Execution

No description provided by source. Computer Associates ARCserve D2D r15 Web Service Apache Axis2 World Accessible Servlet Code Execution Vulnerability Poc product homepage: https://support.ca.com/phpdocs/0/8363/support/arcserved2dsupport.html vulnerability: The Tomcat Server, which listens for...

Microsoft Windows 2000 - Subnet Bandwidth Manager RSVP Server Authority Hijacking Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8397/info A problem has been identified in the RSVP Server for Microsoft Windows 2000 that may allow an attacker to hijack management of the network. This could allow an attacker control of network Quality of Service...

GLSA-201406-34 : KDE Libraries: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-34 KDE Libraries: Multiple vulnerabilities Multiple vulnerabilities have been discovered in KDE Libraries. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a...

KDE Libraries: Multiple vulnerabilities

Background KDE is a feature-rich graphical desktop environment for Linux and Unix-like operating systems. KDE Libraries contains libraries needed by all KDE applications. Description Multiple vulnerabilities have been discovered in KDE Libraries. Please review the CVE identifiers referenced below...

GLSA-201406-21 : cURL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-21 cURL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could cause a man-in-the-middle attack via ...

FBI, NYPD Form Financial Cybercrime Task Force

The FBI has formed a new cybercrime task force with the New York Police Department and the Metropolitan Transit Authority whose job will be to go after high-level financial cyber crimes, employing a model of interagency cooperation that the bureau and other federal law enforcement agencies have...

[oss-security] Re: (Linux kernel) Bug#751417: linux-image-3.2.0-4-5kc-malta: no SIGKILL after prctl(PR_SET_SECCOMP, 1, ...) on MIPS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 According to the manual page, after calling it with 1 as a second argument, any consecutive system calls other than read, write, exit and sigreturn should result in the delivery of SIGKILL. However, under MIPS any consecutive system call behaves as if...

SuSE 11.3 Security Update : openssl-certs (SAT Patch Number 9341)

openssl-certs has been updated to include four new and remove two certificates : - new: AtosTrustedRoot2011:2.8.92.51.203.98.44.95.179.50.crt - new: E-TugraCertificationAuthority:2.8.106.104.62.156.81.15 5.203.83.crt - new: TeliaSoneraRootCAv1:2.17.0.149.190.22.160.247.46.70.2...

IBM DB2 Stored Procedure Infrastructure Privilege Escalation Vulnerability

According to its version, the installation of IBM DB2 running on the remote host is affected by a privilege escalation vulnerability. An error exists related to the Stored Procedure infrastructure and the 'CREATEEXTERNALROUTINE' authority that allows an authenticated user to escalate privileges...

openSUSE Security Update : libfreebl3 (openSUSE-SU-2011:1024-1)

This update updates mozilla nss to 3.12.11. It blacklists the lately compromised DigiNotar Certificate Authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libfreebl3-5097. The text...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2011:1031-1)

This update brings Mozilla Firefox to 6.0.2. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : libfreebl3 (openSUSE-SU-2011:1024-1)

This update updates mozilla nss to 3.12.11. It blacklists the lately compromised DigiNotar Certificate Authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libfreebl3-5097. The text...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-5120)

This update brings Mozilla Thunderbird to 3.1.13. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-5118)

This update brings Mozilla Firefox to 3.6.22 The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : seamonkey (seamonkey-5122)

This update brings Mozilla SeaMonkey to 2.3.3. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-5120)

This update brings Mozilla Thunderbird to 3.1.13. The purpose of this update is to blacklist the compromised DigiNotar Certificate Authority. For more information read: MFSA 2011-34 http://www.mozilla.org/security/announce/2011/mfsa2011-34.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

openSUSE Security Update : puppet (openSUSE-SU-2011:1288-1)

Puppet's certificate authority issued Puppet agent certificates capable of impersonating the Puppet master. Compromised or rogue puppet agents could therefore use their certificates for MITM attacks CVE-2011-3872. Note: If you've set the 'certdnsnames' option in your master's puppet.conf file...

CVE-2013-6744

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATEEXTERNALROUTINE authority...

Design/Logic Flaw

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATEEXTERNALROUTINE authority...

CVE-2013-6744

The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authenticated users to gain privileges by leveraging the CONNECT privilege and the CREATEEXTERNALROUTINE authority...