[oCERT-2015-008] FreeRADIUS insufficent CRL application

2015-008 FreeRADIUS insufficent CRL application Description: The FreeRADIUS server is an open source project that provides a RADIUS implementation. The FreeRADIUS server relies on OpenSSL to perform certificate validation, including Certificate Revocation List CRL checks. The FreeRADIUS usage of...

CakePHP 2.6.6 and 3.0.6 Released

CakePHP 2.6.6 and 3.0.6 Released The CakePHP core team is ready to announce the immediate availability of CakePHP 2.6.6 and 3.0.6. These are maintenance releases that contain important security fixes. Security Fixes Earlier this week we were notified that RequestHandlerComponent had a vulnerabili...

SOL16686 - Point-to-Point Protocol (PPP) vulnerability CVE-2015-3310

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

Fedora 21 : wordpress-4.2.2-1.fc21 (2015-6808)

WordPress 4.2 'Powell' - Upstream announcement https://wordpress.org/news/2015/04/powell/ WordPress 4.2.1 Security Release - Upstream announcement https://wordpress.org/news/2015/04/wordpress-4-2-1/ WordPress 4.2.2 Security and Maintenance Release - Upstream announcement...

Fedora 20 : wordpress-4.2.2-1.fc20 (2015-6790)

WordPress 4.2 'Powell' - Upstream announcement https://wordpress.org/news/2015/04/powell/ WordPress 4.2.1 Security Release - Upstream announcement https://wordpress.org/news/2015/04/wordpress-4-2-1/ WordPress 4.2.2 Security and Maintenance Release - Upstream announcement...

SUSE SLED11 Security Update : lcms2 (SUSE-SU-2013:1250-1)

lcms2 has been updated to the version 2.5 which is a maintenance release to fix various security and other bugs. - User defined parametric curves can now be saved in ICC profiles. - RGB profiles using same tone curves for several channels are storing now only one copy of the curve - update black...

[SECURITY] Fedora 20 Update: phpMyAdmin-4.4.6.1-1.fc20

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index es, users, permissions, while you still have the ability to directly...

MGASA-2015-0228 Updated virtualbox packages fix security vulnerabilities

Updated virtualbox packages fixes security vulnerability This update provides the 4.3.28 maintenance release fixing the following security issue: The Floppy Disk Controller FDC in QEMU, XEN, KVM and virtualbox allows local guest users to cause a denial of service out-of-bounds write and guest cra...

WordPress DP Maintenance Mode Lite Plugin <= 2.0.226 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress DP Maintenance Mode Lite Plugin <= 2.0.226 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

! metasploit exploit module development tutorial! - Vulnerability warning-the black bar safety net

How to write a Metasploit POST-development module ! Metasploit currently has a about a 1 5 0 a exploit module. Most of the exploits using the module are through the Windows, Solaris and Cisco these platforms were collected. At the same time, Metasploit can also for these modules on the line...

Why Tor Shuts Down its Anonymous Cloud Service?

Why Tor Cloud Project Shuts Down? Yes, you heard that right. The Tor project has announced that it’s closing down its Tor Cloud service that allowed users to donate bandwidth for browsing the web anonymously. The Tor Project is a non-profit organization behind the Tor anonymizing network that...

ManageEngine Applications Manager MaintenanceTaskAPIUtil Remote Code Execution Vulnerability

ZOHO ManageEngine Applications Manager is a set of application performance monitoring software from ZOHO. The software allows remote monitoring and management of different business systems, applications and network services e.g. servers, operating systems, etc.. A remote code execution...

The vulnerabilities of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, allow attackers to cause malfunctions during maintenance operations.

The vulnerability of the microprogrammed Ethernet switches from Moxa, models PT-508, PT-7728, PT-7828, and MDS-G4012, is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the microprogramming software of the Cisco ASA security device allows a remote attacker to induce a maintenance failure.

The vulnerability of the microprogramming software of the Cisco ASA security device in the XML processing module when using Clientless SSL VPN, AnyConnect SSL VPN, or AnyConnect IKEv2 VPN allows a malicious actor to trigger a service failure a malfunction in the VPN operation or a system restart ...

SOL16505 - NTP vulnerability CVE-2015-1798

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

Novell Zenworks Rtrlet.class Session ID Disclosure Vulnerability

This vulnerability allows attackers to disclose Session ID's of logged in users on vulnerable installations of Novell Zenworks. User interaction is not required to exploit this vulnerability. The specific flaw exists within Rtrlet.class. By sending a POST request with the maintenance variable set...

[SECURITY] Fedora 22 Update: powerpc-utils-python-1.2.1-7.fc22

Python based utilities for maintaining and servicing PowerPC systems...

[SECURITY] Fedora 20 Update: powerpc-utils-python-1.2.1-7.fc20

Python based utilities for maintaining and servicing PowerPC systems...

IT-Grundschutz M4.020: Restriktive Attributvergabe bei Unix-Benutzerdateien und -verzeichnissen

IT-Grundschutz M4.020: Restriktive Attributvergabe bei Unix-Benutzerdateien und -verzeichnissen. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4020.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.020 Authors: Thomas Rotter Copyright: Copyrig...