33 matches found
CVE-2020-24376
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3...
Inspecting TLS Web Traffic - Part 1
In this series of blogs I'm going to talk about how the continued move towards all web traffic being encrypted has impacted enterprise security. In this blog I'm going to focus on the basics - what is encrypted web traffic and how can you proactively control this. TLS encryption is the de-facto...
Zero Trust Security Protects Businesses while Enabling Growth
Many companies have their own applications, internal domains, and local area network LAN. But when it comes to business applications, organizations are increasingly dependent on cloud-based resources. These may include email servers, customer relationship management CRM software, or other...
What's New In Security
It's that time of year again. Here at our global headquarters in Cambridge, Massachusetts, the days are getting shorter at least in terms of sunrise and sunset. Gone are the 90 degree days of summer; 60 is the new normal. And as we are now in the midst of the final months of the year, Starbucks i...
Accelerating Your Zero Trust Security Transformation with Enterprise Threat Protector
The basic concepts of zero trust security are relatively simple: trust nothing, verify everything, and maintain consistent controls. But, for CISOs and CIOs charged with transforming their legacy moats and castles architecture to one that allows their enterprises to embrace all of the benefits of...
MiniUPnP MiniUPnPc Denial of Service Vulnerability
The MiniUPnP project provides software that supports the UPnP Internet Gateway Device IGD specification. The project is divided into two parts, MiniUPnPc and MiniUPnPd. MiniUPnPc is a client library that enables applications to access services provided by UPnP "Internet Gateway Devices" present o...
ClarkConnect XSS vulnerability
Hello, I have found an XSS vulnerability in ClarkConnect web interface. ClarkConnect is an internet server and gateway that provides protocol filtering, bandwidth management, Windows File Sharing / Samba, LDAP Directory Integration and other features... The vulnerability was found in the latest...
UPnP Internet Gateway Device (IGD) Protocol Detection
According to its UPnP data, the remote device is a NAT router which supports the Internet Gateway Device IGD Standardized Device Control Protocol. Therefore, the device is potentially vulnerable as the protocol can allow an adjacent attacker to punch holes in your firewall e.g., via a malicious...
Buffer overflow
Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...
Buffer overflow
Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...
CVE-2007-2386
Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...
CVE-2007-2386
Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...