Data Breach Affects Two Million NY Customers, State Commission to Investigate

The New York State Public Service Commission announced yesterday they’ll be looking into a data breach that may have exposed the personal information of almost two million customers to unknown attackers. An employee from a software consulting firm contracted by New York State Electric & Gas NYSEG...

Best Practice For Setting Up nWorks Collection for Failover and Disaster Recovery

Purpose Additional information given about how collectors work within nWorks and guidelines on how to set up collectors for disaster situations. Solution The Best Practice for Setting Up nWorks Collection for Failover and Disaster Recovery To get started with monitoring through the nWorks...

Logsurfer: Arbitrary code execution

Background Logsurfer is a real time log monitoring and analysis tool. Description Logsurfer log files may contain substrings used for executing external commands. The prepareexec function in src/exec.c contains a double-free vulnerability. Impact A remote attacker could inject specially-crafted...

Best Practices for Recovery from the Malicious Erasure of Files

There are many ways in which cyber criminals can damage computer systems and data, including changing or deleting files, wiping hard drives, and erasing backups to hide their malicious activity. Hard drives are wiped, or "zeroed out," when the original data is overwritten with zeros or different...

WebTitan Appliance v3.50.x - Multiple Web Vulnerabilities

Document Title: =============== WebTitan Appliance v3.50.x - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=89 Release Date: ============= 2012-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 89...

Homeland Security have eye on Journalists

Homeland Security have eye on Journalists The Department of Homeland Security has declared its intention to gather personal data on journalists or others who might use "traditional and/or social media in real time to keep their audience situationally aware and informed". Well, it'll be interestin...

Smart Hacking For Privacy : What TV shows you watch ?

Smart Hacking For Privacy : What TV shows you watch ? White-hat hackers have exposed the privacy shortcomings of smart meter technology. At the Chaos Communication Congress in Germany, 28C3, researchers presented "Smart Hacking For Privacy" After analyzing data collected by a smart meter, these...

DSA-2384-1 cacti - several

Bulletin has no description...

Fedora Update for zabbix FEDORA-2011-17559

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2011-17559 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

[SECURITY] Fedora 16 Update: zabbix-1.8.10-1.fc16

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

[SECURITY] Fedora 15 Update: zabbix-1.8.10-1.fc15

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

Wireless Penetration Testing Series Part 1: Getting Started with Monitoring and Injection

Wireless Penetration Testing Series Part 1: Getting Started with Monitoring and Injection We had promised a while back that we would start a Wireless Security and Penetration testing series based on the SecurityTube Wi-Fi Security Expert SWSE course! This course is based on the popular and much...

As SOPA Looms, Survey Suggests Most Americans Are Media Pirates – And Proud Of It

While lawmakers in the U.S. debate new laws that would give media companies powerful new legal weapons to stop the distribution of copyrighted content online, a new survey of Americans finds that most admit to having pirated content themselves – and don’t see any problem with it. The survey of...

[SECURITY] Fedora 16 Update: ipmitool-1.8.11-8.fc16

This package contains a utility for interfacing with devices that support the Intelligent Platform Management Interface specification. IPMI is an open standard for machine health, inventory, and remote power control. This utility can communicate with IPMI-enabled devices through either a kernel...

ECSHOP 2.6 calendar.php本地包含漏洞

ECShop是一款B2C独立网店系统,适合企业及个人快速构建个性化网上商店。系统是基于PHP语言及MYSQL数据库构架开发的跨平台开源程序。 在文件js/calendar.php中： code$lang = !empty$GET'lang' ? trim$GET'lang' : 'zhcn'; if !fileexists'../languages/' . $lang . '/calendar.php' $lang = 'zhcn'; requiredirnamedirnameFILE . '/data/config.php'; header'Content-type:...

IBM DB2 / DB2 Connect Tivoli监视代理DT_RPATH特权提升漏洞

Bugtraq ID: 51181 CVE ID：CVE-2011-4061 IBM DB2 Universal Database Server是一款大型的商业关系数据库系统 IBM DB2/IBM DB2 Connect存在安全漏洞，允许恶意本地用户提升特权 Tivoli监视代理ITMA绑定的SUID "tmaitm6/lx8266/bin/kbbacf1"可执行文件不安全使用DTRPATH来装载libkbb.so库，本地攻击者可以利用此漏洞诱使目标用户在特制库所在目录运行应用程序，可装载任意库提升权限 0 DB2 Connect 9.x IBM DB2 9.x 厂商解决方案...

India orders Net firms to censor themselves

India orders Net firms to censor themselves Some of the world's top websites will have to purge themselves of all content that is offensive to Indians by February 6. The companies must update their progress on the effort within two weeks, a court in New Delhi ordered on Saturday, the reports say...

DEBIAN-CVE-2011-4896

Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port...

Microsoft Word Access Violation Remote Code Execution Vulnerability

Description Microsoft Word is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Word file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Fedora Update for zabbix FEDORA-2011-16712

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2011-16712 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...