Troubling Cracks Showing in Internet's Security Foundation

The revelation last week that researchers Thai Duong and Juliano Rizzo had developed a new attack on SSL that gives them the ability to decrypt some protected sessions on the fly sparked a lot of discussions about the inherent problems of the protocol and whether it has outlived its usefulness. B...

Cisco Unified Communications Manager / Cisco Intercompany Media Engine / Cisco TelePresence Codecs DoS

Crash on Service Advertisement Framework SAF packet parsing, crash on SIP processing, connection flood DoS...

Important: Red Hat Security Advisory: JBoss Communications Platform 1.2.11 and 5.1.1 security update

An updated JBoss Web Services Native component for JBoss Communications Platform 1.2.11 and 5.1.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability...

Cisco Fixes Flaws in LAN Management, Unified Communications Products

Cisco has issued patches for a series of vulnerabilities in its Cisco Unified Service Monitor and Cisco Unified Operations Manager and CiscoWorks LAN Management Solution products, all of which can lead to remote code execution. The vulnerabilities are considered fairly serious by Cisco, consideri...

Fedora Update for openssl FEDORA-2011-12281

Check for the Version of openssl OpenVAS Vulnerability Test Fedora Update for openssl FEDORA-2011-12281 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 16 Update: openssl-1.0.0e-1.fc16

The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...

RSA SecurID Attack May Have Also Struck U.S. Defense Orgs

Attackers behind March’s RSA SecurID attack apparently used the same method to try to infiltrate two U.S. national security organizations according to data recently made public by file checking site VirusTotal. Per an IDG News Service story, the malicious Flash-laden Excel spreadsheet was uploade...

CVE-2011-3386

Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service adverse human health effects via unspecified vectors involving wireless communications and knowledge o...

Code injection

Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service adverse human health effects via unspecified vectors involving wireless communications and knowledge o...

CVE-2011-3386: Undefined Security Weakness

Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service adverse human health effects via unspecified vectors involving wireless communications and knowledge o...

PT-2011-4421

Name of the Vulnerable Software and Affected Versions Medtronic Paradigm wireless insulin pump versions 512, 522, 712, and 722 Description The issue allows remote attackers to modify the delivery of an insulin bolus dose, potentially causing adverse human health effects. This can be achieved via...

Cisco Security Advisory: Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server Advisory ID: cisco-sa-20110824-cucm-cups Revision 1.0 For Public Release 2011 August 24 1600 UTC GMT...

Cisco Security Advisory: Denial of Service Vulnerabilities in Cisco Intercompany Media Engine

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Denial of Service Vulnerabilities in Cisco Intercompany Media Engine Advisory ID: cisco-sa-20110824-ime Revision 1.0 For Public Release 2011 August 24 1600 UTC GMT...

Cisco Unified Communications Manager / Cisco Unified Presence Server information leakage

OpenQuery information leakage...

CVE-2011-2562

Unspecified vulnerability in Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x before 6.15su2, 7.x before 7.15bsu3, 8.x before 8.03asu1, and 8.5 before 8.51 allows remote attackers to cause a denial of service service outage via a SIP INVITE message, aka Bug ID CSCth43256...

CVE-2011-2563

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

CVE-2011-2564

Unspecified vulnerability in the Service Advertisement Framework SAF in Cisco Unified Communications Manager aka CUCM, formerly CallManager 8.x before 8.51 and Cisco Intercompany Media Engine 8.x before 8.51 allows remote attackers to cause a denial of service device reload via crafted SAF packet...

CVE-2011-1643

Cisco Unified Communications Manager aka CUCM, formerly CallManager 6.x, 7.x before 7.15bsu4, 8.0, and 8.5 before 8.51su2 and Cisco Unified Presence Server 6.x, 7.x, 8.0, and 8.5 before 8.5xnr allow remote attackers to read database data by connecting to a query interface through an SSL session,...

CVE-2011-2560

The Packet Capture Service in Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x does not properly handle idle TCP connections, which allows remote attackers to cause a denial of service memory consumption and restart by making many connections, aka Bug ID CSCtf97162...

CVE-2011-2561

The SIP process in Cisco Unified Communications Manager aka CUCM, formerly CallManager 7.x before 7.15bsu4 and 8.x before 8.01 does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point MTP, which allows remote...