OpenVZ Guest Detection

/proc/userbeancounters could be read. This file provides information to the guest operating system in OpenVZ containers. TRUSTED...

Pandora Fms 3.1 - Directory Traversal / Local File Inclusion

Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applications and hardware systems such as...

BackTrack 4 R2 : New release download now !

After being in production for almost 3 months, BackTrack has been updated – yet again! It has been aptly code named – "Nemesis". "BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated ...

[SECURITY] Fedora 14 Update: suricata-1.0.2-1.fc14

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

Researchers Working Toward Processor-Specific Attacks

The last two decades have been a cake walk for malware authors. More than nine-tenths of the world’s computers run some variation of the same operating system – Microsoft’s Windows. A similarly sized super-majority use an array of applications from the same vendor: Microsoft Office, the Internet...

Mandriva Update for gkrellm MDVA-2010:216 (gkrellm)

Check for the Version of gkrellm OpenVAS Vulnerability Test Mandriva Update for gkrellm MDVA-2010:216 gkrellm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MDVA-2010:216 : gkrellm

The gkrellm package shipped in 2010.0 and 2010.1 was build without libsensor support, preventing the usage of hardware sensors in some cases, as reported in bug 55400. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disable...

Mozilla Firefox 3.5.x < 3.5.14 Multiple Vulnerabilities

Binary data 801368.prm...

DEBIAN-CVE-2010-2938

arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure VMCS implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when an Intel platform without Extended Page Tables EPT functionality is used, accesses VMCS fields without verifying hardware support for these...

Microsoft Proposes 'Health Certificates' For Internet Access

Microsoft is proposing a new Internet-wide security model, based on the concepts of public health, that is designed to address the problem of how to prevent infected machines from affecting the security and performance of PCs elsewhere on the Web. The model would require each PC to present a...

wdb-version NSE Script

Detects vulnerabilities and gathers information such as version numbers and hardware support from VxWorks Wind DeBug agents. Wind DeBug is a SunRPC-type service that is enabled by default on many devices that use the popular VxWorks real-time embedded operating system. H.D. Moore of Metasploit ha...

MDVA-2009:085 : mesa

A bug in mesa would cause hardware accelerated yuv conversion to fail, resulting in videos being displayed with wrong colors while using a gl video output driver. This update fixes this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currentl...

Wireless and Wired Network Interceptor: the Interceptor

The Interceptor is a wireless wired network tap. Basically, a network tap is a way to listen in to network traffic as it flows past. I haven’t done extensive research but all the ones I found when looking passed the copy of the traffic onto a specified wired interface which was then plugged into ...

Fedora 12 : argyllcms-1.0.4-5.fc12 (2010-3587)

Backport the 55-Argyll.rules files from hargyllcms as the upstream Argyll file allows access to the hardware serial ports for all users. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Malware Found on Lenovo Driver Download

The driver download portal of hardware manufacturer Lenovo temporarily deployed malicious code. Various virus scanners issued alerts about a Java-based Trojan downloader or dropper. Read the full article. The H Security...

CentOS 5 : kernel (CESA-2010:0398)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Teach your Syskey Double encryption cracking techniques-vulnerability warning-the black bar safety net

In Windows 2 0 0 0/XP system installation directory there is a“repair”folder, the specific location is: c: WINDOWS epair, where c: is your installation of the system where the drive letter, which holds that the system is installed for the first time after startup to create the registry backup fil...

Cisco Hardware Counterfeiters Caught By Feds

A joint investigation by federal agencies leads to the conviction of several individuals trading in counterfeit Cisco network hardware. Read the full article. eWEEK...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5.4 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores...

Monetary Value of Vulnerabilities Still High

The Pwn2Own contest is probably the best theoretical situation to show the damage that can be caused by skilled, dedicated attackers. However, throughout the contest, many researchers say the cash and hardware prizes were not enough to get them to give up “high-value” browser vulnerabilities. The...