188 matches found
Missing Two-Factor Authentication Led to JPMorgan Breach
The biggest U.S. banking breach of all time came down to the smallest of details. The New York Times, citing sources close to the ongoing investigation of the JPMorgan data breach, said hackers found a server unprotected by two-factor authentication to break in using a stolen user name and passwo...
EFF Calls Out ISPs Modifying STARTTLS Encryption Commands
As Net Neutrality debates swirl, privacy advocates at the Electronic Frontier Foundation and VPN provider Golden Frog have gone public with a Federal Communications Commission filing that got more attention for accusations that Verizon FIOS customers were having their Netflix streaming service...
wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)
epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...
Threat Outbreak Alert: Fake Tax Filing Notice Email Messages on September 2, 2013
Medium Alert ID: 30625 First Published: 2013 September 3 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax filing notice for the recipient. The text in the email message attempts to convince the recipient to open...
Stable Channel Update
The Stable channel has been updated to 25.0.1364.160 for Windows, Mac, and Linux. This release contains security fixes. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date...
wireshark: DoS via excessive CPU consumption in AFP dissector (wnpa-sec-2012-17)
epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop and CPU consumption via a large number of ACL entries...
Apple Filing Protocol Info Enumerator
This module fetches AFP server information, including server name, network address, supported AFP versions, signature, machine type, and server flags. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...
Update: Verisign Admits To Security Breaches in 2010
Verisign, the Internet security company responsible for management of the .COM domain, told federal regulators that it was the victim of several successful attacks in 2010, but that those incidents were not reported to the company’s management until September, 2011. The news was first reported by...
Stable Channel Update
The Stable channel has been updated to 14.0.835.202 for Windows, Mac, Linux, and Chrome Frame. This release contains Adobe Flash Player 11, along with the stability and security fixes listed below. Security fixes and rewards: Please see the Chromium security page for more detail. Note that the...
Report: Google May Face $500m Fine Over Rogue Pharma Ads
The Wall Street Journal is reporting that search giant Google is close to reaching a settlement with the U.S. Justice Department over an investigation of the company’s policy of running ads from online pharmacies that operate outside U.S. borders and in violation of U.S. law. Google has not made ...
Chrome Stable Update
The Google Chrome team is happy to announce the arrival of Chrome 11.0.696.57 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 11 contains some really great improvements including speech input through HTML. Security fixes and rewards: Please see the Chromium security page f...
OS Identification : Apple Filing Protocol
This script attempts to identify the operating system type and version by looking at the capabilities of the remote Apple Filing Protocol Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53331; scriptversion"1.13"; scriptcvsdate"Date: 2020/01/22";...
afp-brute NSE Script
Performs password guessing against Apple Filing Protocol AFP. Script Arguments afp.password, afp.username See the documentation for the afp library. passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. Example Usage nmap -p 548 --scrip...
CVE-2008-1027
CVE-2008-1027 is tied to Apple File Protocol (AFP) on Mac OS X prior to 10.5.3, where AFP Server did not verify that requested files/directories were inside shared folders. This allowed remote attackers to read arbitrary files via unspecified AFP traffic. The issue is documented in the 2008-003 s...
Server side request forgery (ssrf)
ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service daemon crash via an invalid UAM field in a request to the Apple Filing Protocol AFP service on TCP port 548...
CVE-2008-0759
ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service daemon crash via an invalid UAM field in a request to the Apple Filing Protocol AFP service on TCP port 548...
CVE-2008-0759
CVE-2008-0759 affects ExtremeZ-IP File and Print Server (ExtremeZ-IP.exe) versions up to 5.1.2x15. The vulnerability allows remote attackers to trigger a daemon crash/DoS by sending an invalid UAM field in an AFP (Apple Filing Protocol) request to TCP port 548. Exploitation details are not provid...
ExtremeZ-IP Multiple Remote Flaws
Binary data 4371.prm...
CVE-2006-5517
Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application OMFA allow remote attackers to execute arbitrary PHP code via a URL in the PROJECTROOT parameter to 1 editmeetings/session.php, 2 email/session.php, 3 entityproperties/session.php, or 4 inc/mail.ph...
CVE-2006-5517
Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application OMFA allow remote attackers to execute arbitrary PHP code via a URL in the PROJECTROOT parameter to 1 editmeetings/session.php, 2 email/session.php, 3 entityproperties/session.php, or 4 inc/mail.ph...