4136 matches found
389-ds-base: ACI readable by anonymous user
It was found that 389 Directory Server was vulnerable to a flaw in which the default ACI Access Control Instructions could be read by an anonymous user. This could lead to leakage of sensitive information...
PT-2017-8723 · Red Hat +3 · Red Hat Enterprise Linux Desktop +8
Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Linux Desktop versions 6 through 7 Red Hat Enterprise Linux HPC Node versions 6 through 7 Red Hat Enterprise Linux Server versions 6 through 7 Red Hat Enterprise Linux Workstation versions 6 through 7 389 Directory Server...
[slackware-security] mariadb
New mariadb packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mariadb-10.0.28-i586-1slack14.2.txz: Upgraded. This update fixes several security issues. For more information, see:...
Updated 389-ds-base packages fix security vulnerability
A vulnerability in 389-ds-base was found that allows to bypass limitations for compare and read operations specified by Access Control Instructions. When having LDAP sub-tree with some existing objects and having BIND DN which have no privileges over objects inside the sub-tree, unprivileged user...
MS16-121: Description of the security update for Word Automation Services on SharePoint Server 2013: October 11, 2016
MS16-121: Description of the security update for Word Automation Services on SharePoint Server 2013: October 11, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more abo...
MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016
None None...
Important: Red Hat Security Advisory: Red Hat JBoss A-MQ 6.3 security update
Red Hat JBoss A-MQ 6.3, which fixes multiple security issues and includes several bug fixes and enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...
Supported NFS protocols and how to identify which protocol is being used
Q. What are the supported version of NFS protocol ? How to identify which being used now ? A. NFSv3 is supported with XenServer 6.1,6.2,6.5 and XenServer version 7 supports NFSv3 and NFSv4.If the underlying storage array does not support NFSv4, NFSv3 will be used to mount the share. In order to...
How to Add AutoDiscovery Record for Citrix Endpoint Management
This article details on how to add the AutoDiscovery Record...
How to configure Receiver to a Store that is not advertised
to demonstrate how to configure / connect to a Store when such store is not advertised...
MS16-108: Update Rollup 15 for Exchange Server 2010 Service Pack 3: September 13, 2016
MS16-108: Update Rollup 15 for Exchange Server 2010 Service Pack 3: September 13, 2016 Summary This update rollup is included in a security update. This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow remote code execution ...
xen-kernel -- x86: Mishandling of instruction pointer truncation during emulation
The Xen Project reports: When emulating HVM instructions, Xen uses a small i-cache for fetches from guest memory. The code that handles cache misses does not check if the address from which it fetched lies within the cache before blindly writing to it. As such it is possible for the guest to...
SWIFT Warns Banks Of More Cyberattacks
Reports of additional attacks against banks that use SWIFT, the global financial transaction messaging network, came to light Wednesday. The attacks were reportedly persistent, sophisticated and in some cases successful, impacting an undisclosed number of financial institutions. It’s the latest...
Updated mupdf packages fix security vulnerability
A flaw was discovered in the pdfloadmeshparams function allowing out-of-bounds write access to memory locations. With carefully crafted input, that could trigger a heap overflow, resulting in application crash or possibly having other unspecified impact CVE-2016-6525. Also, mupdf already containe...
Cisco SNMP RCE vulnerability reproduction process-vulnerability warning-the black bar safety net
NSA data leaked, many cattle are given in the analysis report, let me benefit. As a technical noob, want to share the following analysis\eqgrp-free-file\Firewall\EXPLOITS\EXBA ideas, build vulnerability of the environment of the process and Use Conditions of the test. This article has a very stro...
Universal Serial aBUSe: USaBUSe
Universal Serial aBUSe Universal Serial aBUSe is a project released at Defcon 24 by Rogan Dawes. The team took some fairly common attacks fake keyboards in small USB devices that type nasty things and extended them to provide us with a bi-directional binary channel over our own wifi network to gi...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 14.1 and 14.2 to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-firefox-45.3.0esr-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more...
Moderate: Red Hat Bug Fix Advisory: Red Hat Satellite 6.2 Capsule and Server
Red Hat Satellite 6.2 now available for Red Hat Enterprise Linux 6 and 7 Red Hat Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, remote management and monitoring of multiple Linux deployments with a single, centralized tool. It performs...
