212 matches found
Ice IX: Not Cool At All
My colleague Jorge Mieres recently found a C&C server of a botnet based on a malicious program called Ice IX. As announced on several user forums, Ice IX is a bot created using the source code of ZeuS 2.0.8.9, which became publicly available in May. The author of the new bot says the program...
Ice IX, the First Crimeware Based on the Leaked ZeuS Sources
After rumors about the supposed merger between SpyEye and ZeuS, and the public release of the source of the latter, it was logical that the range of possibilities opened up even more for new cybercriminals into the ecosystem of crimeware. Consistent with this, it was only a matter of time for the...
Доменная зона .рф откровется для всех желающих 11 ноября
На проходящей в Москве конференции RIPE NCC накануне вечером было объявлено о том, что открытая доменная регистрация в российской зоне .рф стартует 11 ноября в полдень по московскому времени. Напомним, что до сих пор домены .рф могли регистрировать только госучреждения, госпредприятия,...
HP Security Digests - HP-UX security bulletins digest
HP Support Information Digests =============================================================================== o Security Bulletin Digest Split ------------------------------ The security bulletins digest has been split into multiple digests based on the operating system HP-UX, MPE/iX, and HP...
Hewlett-Packard Company MPE/iX FTPSRVR does not properly validate certain commands
Overview A vulnerability in the FTP server included with the MPE/iX operating system may allow a remote attacker to gain unauthorized access. Description MPE/iX is an operating system produced by Hewlett-Packard Company. The FTP server included with MPE/iX FTPSRVR contains a vulnerability which m...
CVE-2002-0610
Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges...
CVE-2002-0609
Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service system failure with "SA1457 out of iporttimeout.fixupmessageframe" via malformed IP packets...
CVE-2002-0609
CVE-2002-0609 describes a vulnerability in HP MPE/iX 6.0 through 7.0 that can cause a denial of service (system failure described as “SA1457 out of i_port_timeout.fix_up_message_frame”) when processing malformed IP packets. The provided sources identify the affected product family and the attack ...
CVE-2002-0609
Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service system failure with "SA1457 out of iporttimeout.fixupmessageframe" via malformed IP packets...
CVE-2002-0610
The CVE-2002-0610 vulnerability affects HP MPE/iX FTPSRVR (versions 6.0–7.0). The FTP server does not properly validate certain FTP commands, enabling a remote attacker to gain unauthorized access. HP/HP-UX bulletin HPSBMP0204-014 documents the issue and provides patches: 6.0 FTPGD91A, 6.5 FTPGD9...
CVE-2002-0610
Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges...
CVE-2001-1239
PowerNet IX is identified as the affected product. The CVE-2001-1239 entry describes a remote-denial-of-service condition triggered by a port scan. The available documents do not provide root cause details, affected versions, specific vulnerable components, exploit code, or remediation steps. Exp...
CVE-2001-1239
PowerNet IX allows remote attackers to cause a denial of service via a port scan...
CVE-1999-1136
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages using e-mail or modem between customer and Response Center Predictive systems...
CVE-1999-1136
CVE-1999-1136 affects Predictive on HP-UX (11.0 and earlier) and MPE/iX (5.5 and earlier). The underlying issue is in the traffic used for Predictive messages (via e-mail or modem) between customer machines and Response Center Predictive systems, which can allow an attacker to compromise data tra...
CVE-2001-0608
CVE-2001-0608 affects HP3000 systems running MPE/iX 5.5 through 6.5 with the HP architected interface facility (AIF). The vulnerability allows a user to gain additional privileges and access to databases via the AIFCHANGELOGON component. HP’s security bulletin (HPSBMP0103-011) describes the probl...
CVE-2001-1239
PowerNet IX allows remote attackers to cause a denial of service via a port scan...
Hewlett-Packard MPE/iX linkeditor permits privilege escalation
Overview There is a problem with the MPE/iX linkeditor that may allow an attacker to gain system manager privileges. Description The problem affects HP3000 systems running MPE/iX versions 5.5 through 6.5. HP has published a security bulletin describing the solution to this vulnerability...
Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly
Overview There is a problem in the NM Debug facility of MPE/iX that allows users to gain unauthorized privileges. Description The problem affects HP3000 systems running MPE/iX versions 5.5 through 6.5. HP has published a security bulletin describing the solution to this vulnerability...