Threat Outbreak Alert RuleID13024: Email Messages Distributing Malicious Software on January 6, 2015

Medium Alert ID: 36922 First Published: 2015 January 7 14:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13024 may contain the following files: Name |...

Threat Outbreak Alert RuleID13021: Email Messages Distributing Malicious Software on May 6, 2015

Medium Alert ID: 36919 First Published: 2015 January 7 14:31 GMT Last Updated: 2015 May 7 12:19 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13021 and...

Threat Outbreak Alert RuleID8337KVR: Email Messages Distributing Malicious Software on March 16, 2015

Medium Alert ID: 36915 First Published: 2015 January 6 17:06 GMT Last Updated: 2015 March 17 13:17 GMT Version: 39 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID8337KVR...

Threat Outbreak Alert RuleID4400KVR: Email Messages Distributing Malicious Software on January 28, 2016

Medium Alert ID: 36916 First Published: 2015 January 6 13:54 GMT Last Updated: 2016 February 1 14:04 GMT Version: 82 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4400KV...

Threat Outbreak Alert RuleID12976: Email Messages Distributing Malicious Software on December 24, 2014

Medium Alert ID: 36894 First Published: 2015 January 5 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12976 may contain the following files: Name |...

Threat Outbreak Alert RuleID12980: Email Messages Distributing Malicious Software on December 24, 2014

Medium Alert ID: 36891 First Published: 2015 January 5 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12980 may contain the following files: Name |...

Threat Outbreak Alert RuleID12977: Email Messages Distributing Malicious Software on December 24, 2014

Medium Alert ID: 36889 First Published: 2015 January 5 15:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12977 may contain the following files: Name |...

DBMail 'dm_db.c' CRAM-MD5 Authentication Bypass Vulnerability

Dbmail is a collection of programs that allow retrieving and storing mail from databases and can use MySQL, PostgreSQL and SQLite as database backends. An authentication bypass vulnerability exists in DBMail, which can be exploited by an attacker to bypass the authentication mechanism and perform...

Data Stream Encryption: ciphr

Data Stream Encryption Ciphr is a CLI tool for performing and composing encoding, decoding, encryption, decryption, hashing, and other various operations on streams of data. It takes provided data, file data, or data from stdin, and executes a pipeline of functions on the data stream, writing the...

Threat Outbreak Alert RuleID12972: Email Messages Distributing Malicious Software on December 23, 2014

Medium Alert ID: 36887 First Published: 2014 December 24 12:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12972 may contain the following files: Name |...

Ubuntu 14.04 LTS : NTP vulnerabilities (USN-2449-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2449-1 advisory. Neel Mehta discovered that NTP generated weak authentication keys. A remote attacker could possibly use this issue to brute force the authentication key...

Debian DSA-3108-1 : ntp - security update

Several vulnerabilities were discovered in the ntp package, an implementation of the Network Time Protocol. - CVE-2014-9293 ntpd generated a weak key for its internal use, with full administrative privileges. Attackers could use this key to reconfigure ntpd or to exploit other vulnerabilities. -...

Threat Outbreak Alert RuleID12943: Email Messages Distributing Malicious Software on December 21, 2014

Medium Alert ID: 36843 First Published: 2014 December 22 15:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12943 may contain the following files: Name |...

USN-2449-1: NTP vulnerabilities

Neel Mehta discovered that NTP generated weak authentication keys. A remote attacker could possibly use this issue to brute force the authentication key and send requests if permitted by IP restrictions. CVE-2014-9293 Stephen Roettger discovered that NTP generated weak MD5 keys. A remote attacker...

RHEL 5 : ntp (RHSA-2014:2025)

Updated ntp packages that fix several security issues are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

RHEL 6 / 7 : ntp (RHSA-2014:2024)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:2024 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with a referenced time source. Multiple buffer overflow flaws wer...

CentOS 6 / 7 : ntp (CESA-2014:2024)

Updated ntp packages that fix several security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle Linux 5 : ntp (ELSA-2014-2025)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-2025 advisory. - don't generate weak control key for resolver CVE-2014-9293 - don't generate weak MD5 keys in ntp-keygen CVE-2014-9294 Tenable has extracted the...

Oracle Linux 6 / 7 : ntp (ELSA-2014-2024)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-2024 advisory. - don't generate weak control key for resolver CVE-2014-9293 - don't generate weak MD5 keys in ntp-keygen CVE-2014-9294 - fix buffer overflows via...

ntp, ntpdate, sntp security update

CentOS Errata and Security Advisory CESA-2014:2024 Updated ntp packages that fix several security issues are now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base scor...