ntp security, bug fix, and enhancement update

4.2.6p5-5 - reject packets without MAC when authentication is enabled CVE-2015-1798 - protect symmetric associations with symmetric key against DoS attack CVE-2015-1799 - fix generation of MD5 keys with ntp-keygen on big-endian systems CVE-2015-3405 - log when stepping clock for leap second or...

Threat Outbreak Alert RuleID16955: Email Messages Distributing Malicious Software on October 12, 2015

Medium Alert ID: 40155 First Published: 2015 July 27 22:33 GMT Last Updated: 2015 October 12 18:14 GMT Version: 5 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16955 and...

Threat Outbreak Alert RuleID16979: Email Messages Distributing Malicious Software on July 28, 2015

Medium Alert ID: 40171 First Published: 2015 July 27 21:06 GMT Last Updated: 2015 July 29 14:49 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16979 and...

Threat Outbreak Alert RuleID16964: Email Messages Distributing Malicious Software on July 27, 2015

Medium Alert ID: 40162 First Published: 2015 July 27 21:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16964 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16936: Email Messages Distributing Malicious Software on July 24, 2015

Medium Alert ID: 40144 First Published: 2015 July 27 21:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16936 may contain the following files: Name | Siz...

Hawkeye-G v3.0.1.4912 CSRF Vulnerability CVE-2015-2878

UPDATED CORRECTION + Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-HAWKEYEG0724.txt Vulnerability Type: =================== CSRF CVE Reference: ============== CVE-2015-2878 Vendor: =================== www.hexiscyber.com...

ntp, ntpdate security update

CentOS Errata and Security Advisory CESA-2015:1459 Updated ntp packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerabili...

Threat Outbreak Alert RuleID16905: Email Messages Distributing Malicious Software on July 23, 2015

Medium Alert ID: 40127 First Published: 2015 July 24 22:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16905 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16860: Email Messages Distributing Malicious Software on July 23, 2015

Medium Alert ID: 40125 First Published: 2015 July 24 22:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16860KVR may contain the following files: Name |...

Threat Outbreak Alert RuleID16917: Email Messages Distributing Malicious Software on July 24, 2015

Medium Alert ID: 40132 First Published: 2015 July 24 22:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16917 may contain the following files: Name | Siz...

Hawkeye-G 3.0.1.4912 - Cross-Site Request Forgery

Hawkeye-G 3.0.1.4912 - Cross-Site Request Forgery Exploit Title: CSRF, Network Threat Appliance IDS / IPS Google Dork: intitle: CSRF Network Threat Appliance IDS / IPS Date: 2015-07-24 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.hexiscyber.com Softwa...

Threat Outbreak Alert RuleID16871: Email Messages Distributing Malicious Software on July 23, 2015

Medium Alert ID: 40118 First Published: 2015 July 23 20:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16871 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16840: Email Messages Distributing Malicious Software on July 22, 2015

Medium Alert ID: 40107 First Published: 2015 July 23 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16840 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16858: Email Messages Distributing Malicious Software on August 17, 2015

Medium Alert ID: 40102 First Published: 2015 July 23 19:14 GMT Last Updated: 2015 August 17 13:15 GMT Version: 7 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16858,...

Threat Outbreak Alert RuleID16854: Email Messages Distributing Malicious Software on July 22, 2015

Medium Alert ID: 40091 First Published: 2015 July 23 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16854 and RuleID16854KVR may contain the followin...

Threat Outbreak Alert RuleID4132: Email Messages Distributing Malicious Software on July 19, 2016

Medium Alert ID: 40101 First Published: 2015 July 23 13:38 GMT Last Updated: 2016 July 25 14:04 GMT Version: 33 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID4132 and...

Open Web Analytics 1.5.7 Multiple Vulnerabilities

Open Web Analytics version 1.5.7 suffers from password disclosure, weak cryptographic control, and cross site scripting vulnerabilities. + Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-OPENWEBANALYTICS0721.txt Vendor:...

Threat Outbreak Alert RuleID16852: Email Messages Distributing Malicious Software on July 22, 2015

Medium Alert ID: 40088 First Published: 2015 July 22 16:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16852 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16829: Email Messages Distributing Malicious Software on July 21, 2015

Medium Alert ID: 40078 First Published: 2015 July 22 12:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16829 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID16828: Email Messages Distributing Malicious Software on July 21, 2015

Medium Alert ID: 40076 First Published: 2015 July 22 12:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16828 may contain the following files: Name | Siz...