Linkedin sued by Member for Hacking Incident

Linkedin sued by Member for Hacking Incident Illinois resident Katie Szpyrka filed a $5 million class action lawsuit against LinkedIn in the US District Court in the Northern District of California on June 15, claiming the business-oriented social networking site violated its own user agreement a...

Security Veterans Score Funding for New Startup Bluebox

Many people would consider themselves lucky to be a part of one successful start-up company, but for a select group of entrepreneurs, engineers and executives, that’s just the beginning. Such is the case for the team behind new mobile security firm Bluebox, a stealth-mode company that counts SPI...

Survey Shows 85 Percent of Small Business Owners Convinced a Data Breach Unlikely

If a newly released survey is any indication, publicized data breaches aren’t enough to prompt small businesses to better protect their customer or employee data. A survey released this week by The Hartford found 85 percent of small business owners believe a data breach is unlikely and often lack...

Apple Details iOS Security Features in New Guide

Apple has released a detailed security guide for its iOS operating system, an unprecedented move for a company known for not discussing the technical details of its products, let alone the security architecture. The document lays out the system architecture, data protection capabilities and netwo...

Consumer Reports: 13 Million Facebook Users Ignore Privacy Settings

A Consumer Reports investigation indicates 13 million U.S. Facebook users are oversharing — and likely don’t know it. That figure represents 8 percent of Facebook’s 150 million U.S. users, but it is part of an upward trend in users failing to protect themselves while on the social network — putti...

UK's Serious Organised Crime Agency's website taken offline after DDoS attack

UK's Serious Organised Crime Agency's website taken offline after DDoS attack The Serious Organised Crime Agency's website was temporarily shut down today after a cyber attack.It was the victim of a scam known as distributed denial of service DDOS whereby an internet address is flooded with bogus...

Fat Finger Error Lands Welsh Health Board $114K Fine

An e-mail gaffe and a spelling mistake by a doctor led to a breach of the UK’s Data Protection Act last year, according to a press release by the Information Commissioner’s Office today. The Aneurin Bevan Health Board ABHB in South Wales was fined £70,000 about $114,000 USD after it mistakenly se...

UK Govt. Investigating London Marathon Data Breach That Spilled Info On 38,000

The UK Information Commissioner’s Office ICO said it is looking into a possible data breach of the Website used by organizers of the London Marathon – major, international sporting event that attracted more than 37,000 runners for the 37th running on April 22nd. According to a BBC report, the hom...

ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-018: EMC Data Protection Advisor Multiple Vulnerabilities EMC Identifier: ESA-2012-018, DPA-14718 CVE Identifier: CVE-2012-0406 CVE Identifier: CVE-2012-0407 Severity Rating: CVSS v2 Base Score: See below for CVSS Base Scores for individual...

EMC Data Protection Advisor security vulnerabilities

Integer overflow, NULL pointer dereference...

CVE-2012-0406

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

Null pointer dereference

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

Integer overflow

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

CVE-2012-0407

CVE-2012-0407 : In EMC Data Protection Advisor (DPA) 5.5–5.8 SP1, an integer overflow can occur in the DPA_Utilities library when a negative 64-bit value is used in a particular size field, leading to a denial of service (infinite loop). The issue is separate from a NULL pointer dereference (CVE-...

CVE-2012-0406

EMC Data Protection Advisor (DPA) 5.5–5.8 SP1 contains a NULL pointer dereference DoS in DPA_Utilities.cProcessAuthenticationData triggered by AUTHENTICATECONNECTION without a password or with an empty password. Exploitation can crash the daemon. The public disclosures (ESA-2012-018) indicate a S...

CVE-2012-0406

The DPAUtilities.cProcessAuthenticationData function in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an AUTHENTICATECONNECTION command that 1 lacks a password field or 2 has an empty password...

CVE-2012-0407

Integer overflow in the DPAUtilities library in EMC Data Protection Advisor DPA 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service infinite loop via a negative 64-bit value in a certain size field...

Switch your SIM

Rather than carrying your SIM and the data it contains, consider buying a temporary SIM once you arrive at your destination. Many airports have kiosks that sell prepaid SIM cards that are inexpensive and come with prepaid data and minutes. They’re perfect for traveling executives, won’t give an...

EMC Data Protection Advisor NULL Pointer Dereference Denial of Service Vulnerability

EMC Data Protection Advisor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...