Disaster Recovery Disaster: Drill Gone Wrong Leads To Loss Of Data On 800K

Call it a disaster recovery drill disaster. The loss of four magnetic tape cartridges containing data on 800,000 California residents was the unfortunate result of an IBM-managed disaster recovery exercise gone wrong, said Christine Lally, Assistant Secretary, Legislation & Communications for the...

Debian DSA-2429-1 : mysql-5.1 - several vulnerabilities

Due to the non-disclosure of security patch information from Oracle, we are forced to ship an upstream version update of MySQL 5.1. There are several known incompatible changes, which are listed in /usr/share/doc/mysql-server/NEWS.Debian.gz. Several security vulnerabilities were discovered in...

Fedora 15 : postgresql-9.0.7-1.fc15 (2012-2589)

Update to latest Postgres releases --- resolves some security and data loss bugs http://www.postgresql.org/docs/9.1/static/release-9-1-3.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html Note that Tenable Network Security has extracted the preceding description block directly from...

[SECURITY] [DSA 2429-1] mysql-5.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2429-1 [email protected] http://www.debian.org/security/ Florian Weimer March 07, 2012 http://www.debian.org/security/faq -...

Gentoo Security Advisory GLSA 201111-08 (radvd)

The remote host is missing updates announced in advisory GLSA 201111-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201111-08 (radvd)

The remote host is missing updates announced in advisory GLSA 201111-08. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

How to setup SAN access for use with Veeam Backup & Replication.

Purpose This article documents how to set up Direct SAN Access for use with Veeam Backup & Replication. The Direct SAN access transport mode is recommended for VMs whose disks are located on shared VMFS SAN LUNs that are connected to ESXi hosts over FC, FCoE, iSCSI, and on shared SAS storage. In...

Insider Threats vs Hackers - by Emmett Jorgensen

Insider Threats vs Hackers - by Emmett Jorgensen Emmett Jorgensen has worked in IT and Infosec for over 10 years. He works for Kanguru Solutions www.kanguru.com, a manufacturer of secure portable storage solutions. Article taken from 'The Hacker News' Magazine - October Edition. You can Download...

Quest Software Big Brother Arbitrary File Deletion and Overwriting

Two directory traversal vulnerabilities have been reported in Quest Software's Big Brother. Big Brother is a network monitoring software, which enables administrators to monitor their organization's network activity. These vulnerabilities exist due to improper input validation in the application...

Advanced Threats Are Not All the APT

By B.K. DeLong We have heard variations on the argument that within the context of information security, the “advanced persistent threat” APT is not really all that advanced or new, that it is being made too big a deal of or FUD and that it is no more than marketing hype though more of an effort...

Symantec Web Gateway Detection

Symantec Web Gateway was detected on the remote host. This application protects against web-based malware and data loss. The host may be configured as a Central Intelligence Unit, which provides centralized management for multiple gateways. Note: When HTTP credentials are configured, the anti-vir...

Buffer overflow

Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...

CVE-2011-0548

Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...

CVE-2011-0548

CVE-2011-0548 concerns a buffer overflow in the Lotus Freelance Graphics PRZ file viewer component of Autonomy KeyView, used in Symantec Mail Security (SMS) 6.x–8.x, Symantec Brightmail and Messaging Gateway pre-9.5.1, and Symantec DLP pre-10.5.3 and 11.x pre-11.1. The vulnerability allows a remo...

CVE-2011-0548

Buffer overflow in the Lotus Freelance Graphics PRZ file viewer in Autonomy KeyView, as used in Symantec Mail Security SMS 6.x through 8.x, Symantec Brightmail and Messaging Gateway before 9.5.1, and Symantec Data Loss Prevention DLP before 10.5.3 and 11.x before 11.1, allows remote attackers to...

Trend Micro Data Loss Prevention Virtual Appliance Encoded Traversal Arbitrary File Access

The instance of Trend Micro Data Loss Prevention Web Console listening on this port allows an unauthenticated, remote attacker to retrieve arbitrary files through its web server using specially crafted requests with encoded directory traversal sequences. This can result in the disclosure of...

Trend Micro Data Loss Prevention Virtual Appliance Web Console Detection

The remote web server hosts an instance of Trend Micro Data Loss Prevention DLP Web Console. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid55455; scriptversion"1.9";...

Trend Micro Data Loss Prevention Detection

This host is running Trend Micro Data Loss Prevention, a network and endpoint-based data loss prevention DLP solution. OpenVAS Vulnerability Test $Id: gbtrendmicrodatalosspreventiondetect.nasl 6032 2017-04-26 09:02:50Z teissa $ Trend Micro Data Loss Prevention Detection Authors: Michael Meyer...

Trend Micro Data Loss Prevention Directory Traversal Vulnerability

Trend Micro Data Loss Prevention is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker could exploit this vulnerability using directory- traversal strings such as '../' to gain access to arbitrary files on the targeted...

Trend Micro Data Loss Prevention Detection

This host is running Trend Micro Data Loss Prevention, a network and endpoint-based data loss prevention DLP solution. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...