343 matches found
The Hacker's Choice releases SSL DOS Tool
The Hacker's Choice releases SSL DOS Tool German hacker group "The Hacker's Choice" officially released a new DDoS tool. The tool exploits a weakness in SSL to kick a server off the Internet. Establishing a secure SSL connection requires 15x more processingpower on the server than on the...
Mozilla Releases Field Guide to Do Not Track
Mozilla has released a comprehensive guide to the use and implementation of the Do Not Track technology that’s included in its Firefox browser, in an effort to give developers and advertisers a better handle on how the technology works and how users are taking advantage of it. The Do Not Track...
UK Vodafone Phone Hacking method exposed
UK Vodafone Phone Hacking method exposed The Hacker's Choice announced a security problem with Vodafone's Mobile Phone Network today. An attacker can listen to any UK Vodafone customer's phone call. An attacker can exploit a vulnerability in 3G/UMTS/WCDMA - the latest and most secure mobile phone...
Wireshark Denial of Service Vulnerability March-11 (Windows)
The host is installed with Wireshark and is prone to DoS vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkdosvulnmar11win.nasl 7029 2017-08-31 11:51:40Z teissa $ Wireshark Denial of Service Vulnerability March-11 Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networks...
CVE-2011-1142
Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service infinite loop via vectors involving self-referential ASN.1 CHOICE values...
DEBIAN-CVE-2011-1142
Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service infinite loop via vectors involving self-referential ASN.1 CHOICE values...
CVE-2011-1142
Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service infinite loop via vectors involving self-referential ASN.1 CHOICE values...
Stack overflow
Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service infinite loop via vectors involving self-referential ASN.1 CHOICE values...
CVE-2011-1142
Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service infinite loop via vectors involving self-referential ASN.1 CHOICE values...
CVE-2011-1142
Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service infinite loop via vectors involving self-referential ASN.1 CHOICE values...
CVE-2011-1142
Stack consumption vulnerability in the dissectberchoice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service infinite loop via vectors involving self-referential ASN.1 CHOICE values...
PT-2011-2901 · Wireshark · Wireshark
Name of the Vulnerable Software and Affected Versions: Wireshark versions 1.2.x through 1.2.15 Wireshark versions 1.4.x through 1.4.4 Description: The issue is related to a stack consumption vulnerability in the dissect ber choice function within the BER dissector. This vulnerability might allow...
Digital Affluence Is Making Us Less Secure
Our digital affluence is making us insecure, writes Dan Geer, the CISO at In-Q-Tel. Like addled consumers trying to choose from among 20 different types of toothpaste in the supermarket aisle, IT is paralyzed by an overabundance of security products, unable to decide which products are worth the...
Clear iSpot/Clearspot 2.0.0.0 - Cross-Site Request Forgery
Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com Products: iSpot / ClearSpot 4G http://www.clear.com/devices...
[security bulletin] HPSBMI02580 SSRT100254 rev.1 - Palm webOS, Code execution vulnerability in Palm webOS service API
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02516786 Version: 1 HPSBMI02580 SSRT100254 rev.1 - Palm webOS, Code execution vulnerability in Palm webOS service API NOTICE: The information in this Security Bulletin should be acted upon as soo...
Operating System Choice Does Not Equal Security
Yesterday while some of us in the USA were enjoying a day off Google made the news with this article in the Financial Times stating that they are moving away from Microsoft Windows due to security concerns. My first reaction was to question why a company with as many smart brains as Google would...
Sql injection
SQL injection vulnerability in index.php in TBSource, as used in 1 TBDev and 2 TorrentStrike 0.4, allows remote authenticated users to execute arbitrary SQL commands via the choice parameter. NOTE: some of these details are obtained from third party information...
FreeBSD : opera -- multiple vulnerabilities (44224e08-8306-11dc-9283-0016179b2dd5)
An advisory from Opera reports : If a user has configured Opera to use an external newsgroup client or e-mail application, specially crafted Web pages can cause Opera to run that application incorrectly. In some cases this can lead to execution of arbitrary code. When accessing frames from...
Scripts can overwrite functions on pages from other domains
When accesing frames from different Web sites, specially crafted scripts can bypass the same-origin policy, and overwrite functions from those frames. If scripts on the page then run those functions, this can cause the script of the attacker's choice to run in the context of the target Web site...