5640 matches found
Exploit Code Published for New Microsoft IIS FTP Flaw
There is exploit code circulating for a newly discovered vulnerability in the FTP service of Microsoft IIS, a flaw which could enable an attacker to run his own code on a remote server. The flaw mainly affects older versions of IIS, Microsoft’s Web server product, but the existence of a working...
Obama is Failing the Cybersecurity Test
That giant sucking sound you hear is the steady stream of talented security people and experienced policy makers getting out of Washington as quickly as possible as the Obama administration continues to be paralyzed by indecision and a lack of direction regarding cybersecurity. The latest chapter...
bind
New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0696 ISC has published...
US-CERT Technical Cyber Security Alert TA09-204A -- Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-204A Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products Original release date: July 23, 2009 Last revised: -- Source: US-CERT Systems Affected Adobe Flash Player...
Wyse Device Manager Buffer Overflow
Wyse Device Manager is installed on the remote system. The installed version is affected by a buffer overflow vulnerability. By sending a specially crafted request to the server, it may be possible for an unauthorized attacker to crash the server or execute arbitrary commands on the remote system...
Wyse Rapport Hagent Fake Hserver - Command Execution (Metasploit)
$Id: hagentuntrustedhsdata.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Wyse Rapport Hagent Fake Hserver Command Execution
No description provided by source. $Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
US-CERT Technical Cyber Security Alert TA09-187A -- Microsoft Video ActiveX Control Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-187A Microsoft Video ActiveX Control Vulnerability Original release date: July 06, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows XP Microsoft Windows Server 200...
Hackers Pounce on Michael Jackson's Death
As night follows day, malicious hackers are following high-profile news around celebrity deaths to launch attacks. According to a warning from the U.S. Computer Emergency Response team, there are several spam campaigns, phishing attacks, and malicious code targeting the recent deaths of Michael...
Vulnerabilities and Attack Surface
From CERT Will Dormann Two recent US-CERT Vulnerability Notes cert.org describe similar issues in the Adobe Reader and Foxit Reader PDF viewing applications. The vulnerabilities, that both applications failed to properly handle JPEG2000 JPX data streams, were discovered as part of our Vulnerabili...
Debian DSA-1807-1 : cyrus-sasl2, cyrus-sasl2-heimdal - buffer overflow
"James Ralston discovered that the saslencode64 function of cyrus-sasl2, a free library implementing the Simple Authentication and Security Layer, suffers from a missing null termination in certain situations. This causes several buffer overflows in situations where cyrus-sasl2 itself requires th...
Adobe Reader Javascript API getAnnots method vulnerability
Added: 05/29/2009 CVE: CVE-2009-1492 BID: 34736 OSVDB: 54130 Background Adobe Reader is free software for viewing PDF documents. Problem A vulnerability in the Javascript API allows command execution when a user opens a PDF file which calls the getAnnots method with specially crafted arguments...
Adobe Reader Javascript API getAnnots method vulnerability
Added: 05/29/2009 CVE: CVE-2009-1492 BID: 34736 OSVDB: 54130 Background Adobe Reader is free software for viewing PDF documents. Problem A vulnerability in the Javascript API allows command execution when a user opens a PDF file which calls the getAnnots method with specially crafted arguments...
[SECURITY] [DSA 1803-1] New nsd packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1803-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 20, 2009 http://www.debian.org/security/faq -...
ntp -- stack-based buffer overflow
US-CERT reports: ntpd contains a stack buffer overflow which may allow a remote unauthenticated attacker to execute arbitrary code on a vulnerable system or create a denial of service...
Health scares can provide lessons for security
The swine flu outbreak has inspired a flood of comparisons and false analogies to Conficker and other worms, most of which miss the many key differences between the Internet infrastructure and the human population. But there are lessons that security personnel can learn from the ways that health...
Beware of Swine Flu phishing, e-mail scams
Security researchers are starting to sound the alarm avertlabs.com for e-mail scams related to news stories on the Swine Flu. According to a notice from US-CERT, the attacks arrive via an unsolicited email message typically containing a subject line related to the Swine Flu. These email messages...
Dranzer: Fuzzing for ActiveX vulnerabilities
The United States Computer Emergency Response Team US-CERT has released a new ActiveX fuzzer to help developers pinpoint browser-based security vulnerabilities. The tool, called Dranzer, lets software developers test ActiveX controls for vulnerabilities before the software is released to the...
Blackberry plugs code execution holes
From The H Security Research In Motion have published an advisory blackberry.com to warn of another vulnerability in the PDF distiller of the BlackBerry Attachment service. This new vulnerability is in addition to previous issues with the PDF distiller service. According to US-CERT, the issue is...
RedHat Security Advisory RHSA-2009:0431
The remote host is missing updates announced in advisory RHSA-2009:0431. The kdegraphics packages contain applications for the K Desktop Environment, including KPDF, a viewer for Portable Document Format PDF files. Multiple integer overflow flaws were found in KPDF's JBIG2 decoder. An attacker...