Fedora 21 : perl-Module-Signature-0.78-1.fc21 / perl-Test-Signature-1.11-1.fc21 (2015-5833)

This update addresses various security issues in perl-Module-Signature as described below. The default behavior is also changed so as to ignore any MANIFEST.SKIP files unless a 'skip' parameter is specified. An updated version of perl-Test-Signature that accounts for the changed default behavior ...

Updated perl-Module-Signature packages fix security vulnerabilities

Updated perl-Module-Signature package fixes the following security vulnerabilities reported by John Lightsey: Module::Signature could be tricked into interpreting the unsigned portion of a SIGNATURE file as the signed portion due to faulty parsing of the PGP signature boundaries. When verifying t...

Threat Outbreak Alert RuleID8337KVR: Email Messages Distributing Malicious Software on August 22, 2016

Medium Alert ID: 37483 First Published: 2015 February 16 15:48 GMT Last Updated: 2016 August 24 11:37 GMT Version: 25 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337...

Threat Outbreak Alert RuleID13448: Email Messages Distributing Malicious Software on July 1, 2016

Medium Alert ID: 37427 First Published: 2015 February 11 13:46 GMT Last Updated: 2016 July 5 12:08 GMT Version: 13 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13448 an...

Threat Outbreak Alert RuleID13399: Email Messages Distributing Malicious Software on February 3, 2015

Medium Alert ID: 37336 First Published: 2015 February 4 16:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat 13399KVR may contain the following files: Name | Siz...

CVE-2014-0489

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...

Kyle and Stan Malvertising Network Nine Times Bigger

The Kyle and Stan malvertising network has a much bigger reach than first reported—about nine times bigger. In the two weeks since Cisco’s first report on the malicious ad distribution campaign, researchers had a chance to look closer at telemetry data, connect more dots and learn that nearly 6,5...

Threat Outbreak Alert RuleID11616: Email Messages Distributing Malicious Software on September 18, 2014

Medium Alert ID: 35767 First Published: 2014 September 18 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11616 and RuleID11616KVR may contain the...

Threat Outbreak Alert RuleID11305: Email Messages Distributing Malicious Software on February 9, 2015

Medium Alert ID: 35462 First Published: 2014 August 28 13:03 GMT Last Updated: 2015 February 10 14:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11305...

Threat Outbreak Alert RuleID11287: Email Messages Distributing Malicious Software on August 27, 2014

Medium Alert ID: 35443 First Published: 2014 August 27 12:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11287 may contain the following files: Name |...

Internet Bug Bounty: rsync hash collisions may allow an attacker to corrupt or modify files

The rsync algorithm synchronizes remote files in 3 steps: - The receiver divides the basis file into 700-byte blocks, performing two checksums on each block a rolling checksum based on Addler32 and an md5 sum - The sender then scans it's version of the file byte-by-byte looking for matches agains...

Sendmail 8.12.6 Trojan Horse Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5921/info Reportedly, the server hosting sendmail, ftp.sendmail.org, was compromised recently. It has been reported that the intruder made modifications to the source code of sendmail to include Trojan Horse code. Downloa...

FreeBSD 2.x,HP-UX 9/10/11,kernel 2.0.3,Windows NT 4.0/Server 2003,NetBSD 1 loopback (land.c) DoS (2)

No description provided by source. source: http://www.securityfocus.com/bid/2666/info A number of TCP/IP stacks are vulnerable to a loopback condition initiated by sending a TCP SYN packet with the source address and port spoofed to equal the destination source and port. When a packet of this sor...

openSUSE Security Update : dhcpcd (openSUSE-SU-2011:0352-1)

A rogue dhcp server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the dhcp client needs to sanitize the host name offered by the server CVE-2011-0996. This update also fixes...

Threat Outbreak Alert RuleID10245: Email Messages Distributing Malicious Software on June 9, 2014

Medium Alert ID: 34559 First Published: 2014 June 9 13:10 GMT Last Updated: 2014 June 9 18:12 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10245 and...

Windows file Checksums: Errors

List Windows files with checksum errors missing files or other errors. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Windows file Checksums: Matches

List Windows files with no checksum violation or error SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

File Checksums: Violations

List files with checksum violations. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.103942";...

File Checksums: Matches

List files with no checksum violation or error. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

File Checksums

Checks the checksums MD5 or SHA1of specified files. The SSH protocol is used to log in and to gather the needed information. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...