Windows file Checksums

Checks the checksums MD5 or SHA1 of specified files on Windows. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 4 : w3c-libwww (CESA-2007:0208)

Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflow flaws in w3c-libwww were found. If a client...

Threat Outbreak Alert: Fake Photo Sharing Email Messages on June 28, 2013

Medium Alert ID: 29837 First Published: 2013 June 28 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a photo sharing link for the recipient. The text in the email message attempts to convince th...

[slackware-security] ruby

New ruby packages are available for Slackware 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/ruby-1.9.3p448-i486-1slack14.0.txz: Upgraded. This update patches a vulnerability in Ruby's SSL client that could allow...

Threat Outbreak Alert: Fake Bank Payment Transfer Notification Email Messages on September 25, 2014

Low Alert ID: 29776 First Published: 2013 June 25 14:23 GMT Last Updated: 2014 September 25 19:02 GMT Version: 49 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment transfer notification for the recipient. The text in the...

Threat Outbreak Alert: Fake Tax Payment Attachment Email Messages on June 24, 2013

Medium Alert ID: 29772 First Published: 2013 June 25 12:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain a tax payment attachment for the recipient. The text in the email message attempts to convince t...

Threat Outbreak Alert: Fake Product Sample Order Quotation Email Messages on June 22, 2013

Medium Alert ID: 29753 First Published: 2013 June 24 12:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quotation for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Banking Account Information Email Messages on December 4, 2013

Low Alert ID: 29732 First Published: 2013 June 20 14:04 GMT Last Updated: 2013 December 6 18:22 GMT Version: 9 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a banking account information notification for the recipient. The text in th...

Threat Outbreak Alert: Fake Documents Attachment Email Messages on June 14, 2013

Medium Alert ID: 29676 First Published: 2013 June 17 12:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an important document for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Bill Payment Notification Email Messages on November 27, 2013

Medium Alert ID: 29638 First Published: 2013 June 11 16:20 GMT Last Updated: 2013 November 27 16:23 GMT Version: 13 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a payment notification for the recipient. The text ...

favicon_identification

This plugin identifies software version using favicon.ico file. It checks MD5 of favicon against the MD5 database of favicons. See also: http://www.owasp.org/index.php/Category:OWASPFaviconDatabaseProject http://kost.com.hr/favicon.php Plugin type Infrastructure Options This plugin doesnt have an...

Threat Outbreak Alert: Fake Documents Attachment Email Messages on June 10, 2013

Medium Alert ID: 29622 First Published: 2013 June 10 18:50 GMT Last Updated: 2013 June 11 14:28 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain important documents from Wells Fargo for the recipient. The text in the emai...

WPA Cluster Cracker: Moscrack

Moscrack WPA Cluster Cracker Moscrack facilitates the use of a WPA cracker on a cluster. Currently it works with Mosix clustering software, SSH, RSH and Pyrit. It works by reading a word list from STDIN or a file, breaking it into chunks and passing those chunks off to seperate processes that run...

xdm -- remote denial of service

nvd.nist.gov reports X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service NULL pointer dereference and crash by attempting to log int...

Threat Outbreak Alert: Fake Order Invoice Notification Email Messages on April 12, 2014

Low Alert ID: 29458 First Published: 2013 May 28 14:58 GMT Last Updated: 2014 April 14 13:22 GMT Version: 6 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain an order invoice notification for the recipient. The text in t...

Flame One Year Later

It’s been a year since the first reports of the Flame malware surfaced, and looking back at the 12 months since then, it seems more and more each day that the discovery of Flame should be seen as a seminal event in the evolution of malware. When Flame emerged in May 2012, some of the outside...

CVE-2013-2953

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 relies on the MD5 algorithm for signatures in X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

Design/Logic Flaw

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 relies on the MD5 algorithm for signatures in X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

CVE-2013-2953

IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 relies on the MD5 algorithm for signatures in X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof SSL servers via a crafted certificate...

CVE-2013-2953

CVE-2013-2953 affects IBM InfoSphere Optim Data Growth for Oracle E-Business Suite (versions 6.x–9.x) prior to 9.1.0.3. The issue is use of the MD5 algorithm for X.509 certificate signatures, which can enable MITM-style certificate spoofing. The IBM Flash/PR describes the vulnerability and notes ...