Debian DSA-1734-1 : opensc - programming error

b.badrignans discovered that OpenSC, a set of smart card utilities, could stores private data on a smart card without proper access restrictions. Only blank cards initialised with OpenSC are affected by this problem. This update only improves creating new private data objects, but cards already...

RedHat Update for kernel RHSA-2008:0885-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0885-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] [DSA 1734-1] New opensc packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1734-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 05, 2009 http://www.debian.org/security/faq -...

CVE-2009-0809

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

Design/Logic Flaw

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object...

Cambridge researchers slam banking card readers

The Register is reporting on a new study by Cambridge security researchers that show that card readers for online banking are inherently insecure. Researchers Saar Drimer, Steven J Murdoch and Ross Anderson found a number of serious security shortcomings after reverse engineering the underlying...

Will the real [Breach X] please stand up?

Do you remember that classic game show “To Tell the Truth?” It was great and trying to figure out who was the “real” person was always a challenge. Unfortunately Visa and MasterCard are making all of us play the same game of late. There have been recent rumors running rampant alliteration anyone?...

Ethernet Card Manufacturer Detection

Each ethernet MAC address starts with a 24-bit Organizationally Unique Identifier OUI. These OUIs are registered by IEEE. TRUSTED...

Dell Remote Access Card Default Password (deprecated)

Binary data 4852.prm...

APC UPSes (Web/SNMP Mgmt Card) Default Password (deprecated)

Binary data 4830.prm...

CVE-2008-3818

Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service control-card reset via a crafted TCP session...

CVE-2008-3818

Cisco ONS platforms affected by CVE-2008-3818 include the 15310-CL/15310-MA, 15327, 15454/15454 SDH, and 15600 hardware. The vulnerability allows remote attackers to cause a denial of service (control-card reset) by sending a crafted TCP stream, requiring a full TCP three-way handshake on an open...

[SECURITY] Fedora 9 Update: kvm-65-15.fc9

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

kernel security and bug fix update

2.4.21-58.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-58.EL - copyuser doesn't...

GLSA-200812-09 : OpenSC: Insufficient protection of smart card PIN

The remote host is affected by the vulnerability described in GLSA-200812-09 OpenSC: Insufficient protection of smart card PIN Chaskiel M Grundman reported that OpenSC uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running...

OpenSC: Insufficient protection of smart card PIN

Background OpenSC is a smart card application that allows reading and writing via PKCS11. Description Chaskiel M Grundman reported that OpenSC uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4. Impact A...

rakhi-sql.txt

■ Prince Comparison Script : Shopping card @.@ AuToR: XaDoS Contact M&: xados at hotmail dot it B§g: Remote Sql inJection SIte vuln: http://willscript.com/rjbikenew/index.php @.@ str0ke OnlY me no help for this ;- /...

sniffer-detect NSE Script

Checks if a target on a local Ethernet has its network card in promiscuous mode. The techniques used are described at . Example Usage nmap -sV --script=sniffer-detect Script Output Host script results: | sniffer-detect: Likely in promiscuous mode tests: "11111111" Requires nmap stdnse string tabl...

WEBBDOMAIN Post Card <= 1.02 (SQL Injection) Auth Bypass Vuln

No description provided by source. -==============================- Autore: x0r - Road Crew Cms: WebbDomain Web Postcards Bug: Auth ByPass Site Of Seller: http://webbdomain.com -==============================- Exploit: http://webbdomain.com/php/postcarden/admin Username: admin ' or ' 1=1 Pass: x0...

WEBBDOMAIN Post Card <= 1.02 (catid) SQL Injection Vulnerability

No description provided by source. post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php DorK :...