CA20111208-01: Security Notice for CA SiteMinder

CA20111208-01: Security Notice for CA SiteMinder Issued: December 08, 2011 CA Technologies Support is alerting customers to a potential risk in CA SiteMinder. A vulnerability exists that can allow a malicious user to execute a reflected cross site scripting XSS attack. CA Technologies has issued...

Microsoft Unveils New Windows Defender Offline Tool

Microsoft has released a beta version of a new tool that can help victims of malware attacks recover from ugly infections, even if they don’t have the ability to reach the Internet. The Windows Defender Offline tool enables users to clean their systems of malware from a CD or other removable medi...

Buffer overflow in resolver

Buffer overflow in resolver Severity: medium CVE-2011-4315 Not vulnerable: 1.1.8+, 1.0.10+ Vulnerable: 0.6.18-1.1.7...

GoAhead Webserver 2.5 Cross Site Scripting

Title : GoAhead WebServer Multiple Cross Site Scripting Vulnerabilities Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.goahead.com/products/webserver/default.aspx Advisory : http://secpod.org/blog/?p=421 http://secunia.com/advisories/46896...

Hillstone Software HS TFTP Server Denial Of Service

Title : Hillstone Software HS TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.hillstone-software.com/hstftpdetails.htm Advisory : http://secpod.org/blog/?p=419...

Ipswitch TFTP Server 1.0.0.24 - Directory Traversal

Ipswitch TFTP Server 1.0.0.24 - Directory Traversal Title : Ipswitch TFTP Server Directory Traversal Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.whatsupgold.com/index.aspx Advisory : http://secpod.org/blog/?p=424...

Oxide M0N0X1D3 Directory Traversal

Title : Oxide M0N0X1D3 HTTP Server Directory Traversal Vulnerability Software : Oxide M0N0X1D3 HTTP Server Software Version : 20040223 Vendor: http://sourceforge.net/projects/oxide-ws/ Vulnerability Published : 2011-11-15 Vulnerability Update Time : Status : Impact : Medium Bug Description : Oxid...

SSH Explorer v1.97 - Denial of Service Vulnerability

Document Title: =============== SSH Explorer v1.97 - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=326 CNNVD-201112-149 Release Date: ============= 2011-11-19 Vulnerability Laboratory ID VL-ID:...

YaTFTPSvr TFTP Server Directory Traversal Vulnerability

Title: YaTFTPSvr TFTP Server Directory Traversal Vulnerability Software : YaTFTPSvr TFTP Server Software Version : 1.0.1.200 Vendor: http://sites.google.com/site/zhaojieding2/ Vulnerability Published : 2011-07-11 Vulnerability Update Time : Status : Impact : Medium Bug Description : YaTFTPSvr TFT...

YaTFTPSvr TFTP Server 1.0.1.200 Directory Traversal

Title: YaTFTPSvr TFTP Server Directory Traversal Vulnerability Software : YaTFTPSvr TFTP Server Software Version : 1.0.1.200 Vendor: http://sites.google.com/site/zhaojieding2/ Vulnerability Published : 2011-07-11 Vulnerability Update Time : Status : Impact : Medium Bug Description : YaTFTPSvr TFT...

GateProtect CC v3.0.1 - Memory Corruption Vulnerability

Document Title: =============== GateProtect CC v3.0.1 - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=53 Release Date: ============= 2011-10-26 Vulnerability Laboratory ID VL-ID: ==================================== 53...

Ark 2.16 Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20110726 Date: 26th July 2011 Author: Tim Brown URL: / Product: Ark 2.16 Vendor: KDE Risk: Medium Summary The Ark archiving tool is vulnerable to directory traversal via malformed Zip files. When attempts are made...

Multi-Vendor Autonomy Verity Keyview Filter Multiple Issues

SUMMARY Multiple sources have identified several security issues in Autonomys Verity Keyview Content Filter libraries. Symantec has updated the Keyview modules being shipped with Symantec products to address these issues. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|---...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

Apple Website - Non Persistent Cross Site Vulnerability

Document Title: =============== Apple Website - Non Persistent Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=289 APPLE TICKET ID: + 170816722 HALL OF FAME: + http://support.apple.com/kb/HT1318 Release Date: =============...

Barracuda Backup 2.0 Cookie Manipulation

Title: ====== Barracuda Backup v2.0 - Multiple Web Vulnerabilities Date: ===== 2011-09-28 References: =========== Barracuda Backup Application v2.0 VL-ID: ===== 31 Introduction: ============= Barracuda Networks - Worldwide leader in email and Web security. Barracuda Backup Service is a complete a...

LightNEasy v2.3.3 - Local File Include Vulnerability

Document Title: =============== LightNEasy v2.3.3 - Local File Include Vulnerability References Source: ==================== LightNEasy v2.3.3 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 50 Product & Service Introduction:...

FBC Market CMS v1.1 - Multiple Web Vulnerabilities

Document Title: =============== FBC Market CMS v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=281 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 281...

Facebook BugBounty #2 - Persistent Web Vulnerabilities

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=239 http://www.vulnerability-lab.com/getcontent.php?id=277 Release Date: ============= 2011-09-19 Vulnerability Laborato...

Facebook BugBounty #2 - Persistent Web Vulnerabilities

Document Title: =============== Facebook BugBounty 2 - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=239 http://www.vulnerability-lab.com/getcontent.php?id=277 Release Date: ============= 2011-09-19 Vulnerability Laborato...