281 matches found
Juniper Networks Junos OS Denial of Service Vulnerability
Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability exists in the Juniper Networks Junos OS MS-PIC component message handling, which can be exploited by an attacker to crash denial of service the MS-PIC...
Police Surveillance Tools from Special Services Group
Special Services Group, a company that sells surveillance tools to the FBI, DEA, ICE, and other US government agencies, has had its secret sales brochure published. Motherboard received the brochure as part of a FOIA request to the Irvine Police Department in California. "The Tombstone Cam is our...
openSUSE Security Update : the Linux Kernel (openSUSE-2019-2444)
The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2019-16995: A memory leak exits in hsrdevfinalize in net/hsr/hsrdevice.c. if hsraddport fails to add a port, which may cause denial of service, aka CID-6caabe7f197d...
Design/Logic Flaw
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection, aka 'Windows NTLM Tampering Vulnerability'...
CVE-2019-1166: Improper Validation of Integrity Check Value
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection, aka 'Windows NTLM Tampering Vulnerability'...
Denial of service
On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packet, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a sustained Denial of Service. This issue...
CVE-2019-0065: Undefined Security Weakness
On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packet, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a sustained Denial of Service. This issue...
PT-2019-3628
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to insufficient authentication of NTLM packets in Windows, allowing a remote attacker to downgrade the security features of the NTLM MIC Message Integrity Check...
The vulnerability of the fly-admin-mic component in the FLY operating environment of the Astra Linux system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the fly-admin-mic component in the FLY operating environment of the Astra Linux system is related to a flaw in the file system integrity checking mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
PT-2019-20300
Уязвимость компонента fly-admin-mic рабочей среды FLY операционной системы Astra Linux связана с ошибкой проверки целостности файловой системы. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный доступ к защищаемой информации...
CVE-2019-1040
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection, aka ‘Windows NTLM Tampering Vulnerability’. Recent assessments: gwillcox-r7 at October 20, 2020 6:01pm UTC reported: This is now...
CVE-2019-1040: Undefined Security Weakness
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit...
Windows NTLM Tampering Vulnerability
A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC Message Integrity Check protection. An attacker who successfully exploited this vulnerability could gain the ability to downgrade NTLM security features. To exploit...
KB4503263: Windows Server 2012 June 2019 Security Update
The remote Windows host is missing security update 4503263 or cumulative update 4503285. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who...
The vulnerability of the fly-admin-mic utility in the Astra Linux operating system, which allows a intruder to cause a service failure
The vulnerability of the fly-admin-mic utility in the Astra Linux operating system is related to an incorrect interpretation of the operation to disable mandate integrity control. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
PT-2018-2329
Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the incorrect interpretation of the mandatory integrity control disable operation in the fly-admin-mic utility of Astra Linux. Exploitation of this issue may allow...
Apple Modernizes Its Hardware Security with T2
When Apple launched its latest MacBook Air last month, one of its more unusual features is that the built-in microphone automatically turns off when the lid is closed. Apple introduced the feature to eliminate any possibility of malware – or other unwanted applications – using the laptop’s...
CVE-2018-0051 Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG
A Denial of Service vulnerability in the SIP application layer gateway ALG component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC, MS-MPC, MS-DPC or SRX flow daemon flowd process. This issue affects Junos OS devices with NAT or stateful firewall configuration in...
Eavesdropping on Computer Screens through the Webcam Mic
Yet another way of eavesdropping on someone's computer activity: using the webcam microphone to "listen" to the computer's screen...
FreeBSD -- Unauthenticated EAPOL-Key Decryption Vulnerability
Problem Description: When using WPA2, EAPOL-Key frames with the Encrypted flag and without the MIC flag set, the data field was decrypted first without verifying the MIC. When the dta field was encrypted using RC4, for example, when negotiating TKIP as a pairwise cipher, the unauthenticated but...