Theoretical Thinking and the June 2014 Bulletin Release

As security professionals, we are trained to think in worst-case scenarios. We run through the land of the theoretical, chasing “what if” scenarios as though they are lightning bugs to be gathered and stashed in a glass jar. Most of time, this type of thinking is absolutely the correct thing for...

Threat Outbreak Alert RuleID10266: Email Messages Distributing Malicious Software on June 9, 2014

Medium Alert ID: 34565 First Published: 2014 June 9 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10266 may contain the following files: Name | Size...

CVE-2013-7041

The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...

CVE-2013-7041

The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...

DEBIAN-CVE-2013-7041

The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...

Design/Logic Flaw

The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...

CVE-2013-7041

The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...

UBUNTU-CVE-2013-7041

The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...

CVE-2013-7041: Undefined Security Weakness

The pamuserdb module for Pam uses a case-insensitive method to compare hashed passwords, which makes it easier for attackers to guess the password via a brute force attack...

PT-2014-3250

Name of the Vulnerable Software and Affected Versions Pam affected versions not specified Description The issue concerns the pam userdb module for Pam, which uses a case-insensitive method to compare hashed passwords. This comparison method makes it easier for attackers to guess the password via ...

CVE-2014-0637

CVE-2014-0637 is an XSS vulnerability in RSA Adaptive Authentication (On-Premise) back-office case-management, affecting 6.x and 7.x up to 7.1 SP0 P2. The issue allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors. A fix is package 7.1 SP0 P2; RSA recommends u...

CVE-2014-0637: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the back-office case-management application in RSA Adaptive Authentication On-Premise 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-3732

Name of the Vulnerable Software and Affected Versions RSA Adaptive Authentication On-Premise versions 6.x through 7.1 before SP0 P2 Description The issue is related to a cross-site scripting XSS vulnerability in the back-office case-management application. This allows remote authenticated users t...

How to Collect Logs for Veeam ONE

Purpose This article documents the process for gathering diagnostic logging from Veeam ONE. Solution Part 1: Collecting Veeam ONE Application Logs 1. Open the Veeam ONE Settings Utility Run: C:\Program Files\Common Files\Veeam\Veeam ONE Settings\VeeamOneSettings.exe 2. In the lower-left corner,...

Fedora 20 : ReviewBoard-1.7.22-2.fc20 (2014-3446)

New upstream security release 1.7.22 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.22/ - Security Fixes : - An XSS vulnerability was found in the Search field's auto-complete. - New Features : - Added support for anonymous access to public Local Sites. - Added support for...

Fedora 19 : ReviewBoard-1.7.22-1.fc19 (2014-3420)

New upstream security release 1.7.22 - http://www.reviewboard.org/docs/releasenotes/reviewboa rd/1.7.22/ - Security Fixes : - An XSS vulnerability was found in the Search field's auto-complete. - New Features : - Added support for anonymous access to public Local Sites. - Added support for...

CVE-2013-6746

Cross-site scripting XSS vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary w...

Cross site scripting

Cross-site scripting XSS vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary w...

CVE-2013-6746

CVE-2013-6746 is an XSS vulnerability in IBM FileNet P8 Platform Documentation Installable Info Center shipped with IBM FileNet BPM, Content Manager, and Case Foundation. Affected components/versions include FileNet P8 Platform Documentation Installable Info Center 4.5.1–5.2.0, with IBM BPM 4.5.1...

CVE-2013-6746: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary w...