NSA Director Alexander: US Building Cyberattack Teams

More rhetoric is coming out of Washington regarding the use of malware as an auxiliary weapon to bombs and bullets. National Security Agency leader Gen. Keith Alexander told a House Armed Services Committee yesterday that his new Cyber Command will be ready to retaliate should the United States...

TPM Chip in Windows 8 Lays Foundation for Widespread Enhancements to Hardware-Based Security

Today’s release of the Microsoft Windows 8 operating system brings embedded hardware-level security to the forefront. Microsoft, going forward, will require the Trusted Platform Module TPM chip on Windows PCs, phones and tablets, moving security checks to the platoform’s lowest level. TPM isn’t...

[SECURITY] Fedora 15 Update: net6-1.3.14-1.fc15

net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...

[SECURITY] Fedora 14 Update: net6-1.3.14-1.fc14

net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...

Fedora Update for net6 FEDORA-2011-15326

Check for the Version of net6 OpenVAS Vulnerability Test Fedora Update for net6 FEDORA-2011-15326 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

ASPR #2011-02-11-2: Remote Binary Planting in Adobe Flash Player

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2011-02-11-2 ------------------------------------------------------------------------- ASPR 2011-02-11-2: Remote Binary Planting in Adobe Flash Player...

Microsoft to Patch 8 Vulnerabilities in Windows, Office

Microsoft has announced plans to ship two security bulletins next week to fix a total of eight vulnerabilities affecting Windows and Office products. Both bulletins are rated “important” because of the risk compromising the confidentiality, integrity or availability of user data. Microsoft is...

LANDesk Management Gateway 4.x - Multiple Vulnerabilities

LANDesk Management Gateway 4.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/38119/info LANDesk Management Gateway is prone to a cross-site request-forgery vulnerability and a cross-site scripting vulnerability. An attacker can exploit the cross-site request forgery issue t...

LANDesk Management Gateway 4.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/38119/info LANDesk Management Gateway is prone to a cross-site request-forgery vulnerability and a cross-site scripting vulnerability. An attacker can exploit the cross-site request forgery issue to alter the settings on affected devices. This may lead to...

Mandriva Update for dbus MDVA-2008:111 (dbus)

Check for the Version of dbus OpenVAS Vulnerability Test Mandriva Update for dbus MDVA-2008:111 dbus Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for dbus MDVA-2008:111 (dbus)

Check for the Version of dbus OpenVAS Vulnerability Test Mandriva Update for dbus MDVA-2008:111 dbus Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Cisco 871 Integrated Services Router - Cross-Site Request Forgery (2)

Cisco 871 Integrated Services Router - Cross-Site Request Forgery 2 source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may le...

Cisco 871 Integrated Services Router - Cross-Site Request Forgery (1)

Cisco 871 Integrated Services Router - Cross-Site Request Forgery 1 source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may le...

Cisco 871 Integrated Services Router - Cross-Site Request Forgery (1)

source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may lead to further network-based attacks. The 871 Integrated Services...

Cisco 871 Integrated Services Router - Cross-Site Request Forgery (2)

source: https://www.securityfocus.com/bid/31218/info The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability. Successful exploits can run arbitrary commands on affected devices. This may lead to further network-based attacks. The 871 Integrated Services...

amsn_dos.txt

/ bug: amsn remote DoS vulnerability affected version: = 0.96 site: http://amsn-project.net/ tested: amsn-0.96 on freebsd 6.2 author: levent kayan date: Tue Mar 27 16:04:51 CEST 2007 www.corehack.org / / Introduction / amsn is a free open source MSN Messenger clone. / Technical details / During...

CVE-2007-1529

The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack...

CVE-2007-1529

The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack...

CVE-2007-1529

The CVE describes a race-condition vulnerability in the LLTD Responder of Microsoft Windows Vista. If another host sends a spoofed DISCOVERY response first, the Mapper may not receive a response, enabling remote attackers to spoof arbitrary hosts via a network-based Total Spoof attack. The primar...

CVE-2007-1529: Undefined Security Weakness

The LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY packet if another host has sent a spoofed response first, which allows remote attackers to spoof arbitrary hosts via a network-based race condition, aka the "Total Spoof" attack...