CVE-2014-6324 - Microsoft Kerberos Checksum Validation Vulnerability

The Kerberos Key Distribution Center KDC in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtain domain administrator privileges via a...

MS14-068 Microsoft Kerberos Checksum Validation Vulnerability

This module exploits a vulnerability in the Microsoft Kerberos implementation. The problem exists in the verification of the Privilege Attribute Certificate PAC from a Kerberos TGS request, where a domain user may forge a PAC with arbitrary privileges, including Domain Administrator. This module...

Threat Outbreak Alert RuleID12464: Email Messages Distributing Malicious Software on November 17, 2014

Medium Alert ID: 36440 First Published: 2014 November 17 18:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12464 may contain the following files: Name |...

Threat Outbreak Alert RuleID12428: Email Messages Distributing Malicious Software on November 17, 2014

Medium Alert ID: 36426 First Published: 2014 November 17 15:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12428 may contain the following files: Name |...

Threat Outbreak Alert RuleID12397: Email Messages Distributing Malicious Software on November 13, 2014

Medium Alert ID: 36407 First Published: 2014 November 13 19:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12397 may contain the following files: Name |...

Threat Outbreak Alert RuleID12407: Email Messages Distributing Malicious Software on November 13, 2014

Medium Alert ID: 36411 First Published: 2014 November 13 16:29 GMT Last Updated: 2014 November 14 15:17 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID1240...

Threat Outbreak Alert RuleID12382: Email Messages Distributing Malicious Software on November 12, 2014

Medium Alert ID: 36394 First Published: 2014 November 12 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12382 may contain the following files: Name |...

Threat Outbreak Alert RuleID12357: Email Messages Distributing Malicious Software on November 11, 2014

Medium Alert ID: 36383 First Published: 2014 November 11 15:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12357 may contain the following files: Name |...

Microsoft Windows Kerberos Checksum CVE-2014-6324 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges within the context of the application; this can result in the attacker gaining complete control of the affected system. Technologies Affected Avaya...

Threat Outbreak Alert RuleID12342: Email Messages Distributing Malicious Software on November 10, 2014

Medium Alert ID: 36375 First Published: 2014 November 10 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12342 may contain the following files: Name |...

Threat Outbreak Alert RuleID12297: Email Messages Distributing Malicious Software on November 6, 2014

Medium Alert ID: 36349 First Published: 2014 November 6 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12297 may contain the following files: Name |...

Threat Outbreak Alert RuleID12286: Email Messages Distributing Malicious Software on November 6, 2014

Medium Alert ID: 36345 First Published: 2014 November 6 15:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12286 may contain the following files: Name |...

Threat Outbreak Alert RuleID12270: Email Messages Distributing Malicious Software on November 5, 2014

Medium Alert ID: 36334 First Published: 2014 November 5 17:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12270 may contain the following files: Name |...

Threat Outbreak Alert RuleID12234: Email Messages Distributing Malicious Software on November 4, 2014

Medium Alert ID: 36313 First Published: 2014 November 5 16:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12234 may contain the following files: Name |...

Threat Outbreak Alert RuleID12238: Email Messages Distributing Malicious Software on November 4, 2014

Medium Alert ID: 36311 First Published: 2014 November 4 14:29 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12238 may contain the following files: Name |...

Threat Outbreak Alert RuleID12135: Email Messages Distributing Malicious Software on November 10, 2014

Medium Alert ID: 36310 First Published: 2014 November 4 14:29 GMT Last Updated: 2014 November 11 13:57 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12135...

CVE-2014-0489

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...

DEBIAN-CVE-2014-0489

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...

Code injection

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...

CVE-2014-0489

CVE-2014-0489 affects APT prior to 1.0.9: when Acquire::GzipIndexes is enabled, it does not validate checksums, enabling remote code execution via a crafted package. The vulnerability is documented across multiple feeds (NVD, OSV, Debian advisories) with a CVSS v2 base score of 7.5 (HIGH). Affect...