7944 matches found
URL redirection Vulnerability in Google & Facebook
URL redirection Vulnerability in Google An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web...
Debian DSA-2379-1 : krb5 - several vulnerabilities
It was discovered that the Key Distribution Center KDC in Kerberos 5 crashes when processing certain crafted requests : - CVE-2011-1528 When the LDAP backend is used, remote users can trigger a KDC daemon crash and denial of service. - CVE-2011-1529 When the LDAP or Berkeley DB backend is used,...
Debian DSA-2382-1 : ecryptfs-utils - multiple vulnerabilities
Several problems have been discovered in eCryptfs, a cryptographic filesystem for Linux. - CVE-2011-1831 Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary...
Gamers Seek Beta Versions, Download Malware Instead
Tracking the increasingly common use of PC games as an infection vector, researchers at the Microsoft Malware Protection Center MMPC discovered a couple of malicious programs making the rounds on torrent and file sharing sites. Social engineers are disguising their malware by labeling it as the...
[SECURITY] [DSA 2383-1] super security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2383-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 08, 2012 http://www.debian.org/security/faq -...
DSA-2381-1 squid3 - invalid memory deallocation
Bulletin has no description...
DSA-2379-1 krb5 - several
Bulletin has no description...
DSA-2378-1 ffmpeg - several
Bulletin has no description...
[BSA-061] Security Update for openswan
Harald Jenny uploaded new packages for openswan which fixed the following security problems: CVE-2011-4073 Use-after-free vulnerability in the cryptographic helper handler functionality in Openswan 2.3.0 through 2.6.36 allows remote authenticated users to cause a denial of service pluto IKE daemo...
[SECURITY] [DSA 2376-2] ipmitool security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2376-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 31, 2011 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2376-1] ipmitool security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2376-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 30, 2011 http://www.debian.org/security/faq -...
DSA-2263-2 movabletype-opensource - several
Bulletin has no description...
DSA-2374-1 openswan - implementation error
Bulletin has no description...
[SECURITY] [DSA 2371-1] jasper security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2371-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 24, 2011 http://www.debian.org/security/faq -...
New Version of REMnux Malware-Analysis Linux Distribution Released
A new version of the REMnux specialized Linux distribution has been released, and it now includes a group of new tools for reverse-engineering malware. The new additions include a tool for memory forensics as well as one for analyzing potentially malicious PDFs. REMnux was first released last yea...
[SECURITY] [DSA 2363-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2363-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 16, 2011 http://www.debian.org/security/faq -...
Null pointer dereference
The processtgsreq function in dotgsreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via a crafted TGS request that triggers an error other than the...
DEBIAN-CVE-2011-1530
The processtgsreq function in dotgsreq.c in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 1.9 through 1.9.2 allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash via a crafted TGS request that triggers an error other than the...
Google Expands Safe Browsing Alerts to Include Malware Distribution Sites
Google is expanding the amount and kind of data that it supplies to network operators about potentially malicious activity happening on their networks and elsewhere. The company is now giving operators information on dedicated domains that are being used for malware hosting and distribution. Last...