CVE-2014-8522: Improper Authentication

The MySQL database in McAfee Network Data Loss Prevention NDLP before 9.3 does not require a password, which makes it easier for remote attackers to obtain access...

CVE-2014-8535: Undefined Security Weakness

McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors...

CVE-2014-8531: Undefined Security Weakness

The TLS/SSL Server in McAfee Network Data Loss Prevention NDLP before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2014-8528: Exposure of Sensitive Information to an Unauthorized Actor

McAfee Network Data Loss Prevention NDLP before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log...

CVE-2014-8519: Undefined Security Weakness

Unspecified vulnerability in McAfee Network Data Loss Prevention NDLP before 9.2.2 allows local users to read arbitrary files via unknown vectors...

PT-2014-8585

Name of the Vulnerable Software and Affected Versions McAfee Network Data Loss Prevention versions prior to 9.3 Description The issue concerns the MySQL database in the software, which does not require a password for access. This makes it easier for remote attackers to obtain access...

War Times Remote Game Server Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13652/info War Times is susceptible to a remote denial of service vulnerability. This issue is due to a failure of the application to properly bounds check user-supplied network data prior to copying it into a fixed-size...

Gamespy Software Development Kit CD-Key Validation Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11881/info It has been reported that the GameSpy SDK is prone to a buffer overflow vulnerability in its CD-key validation functionality. This issue is due to a failure of the SDK to properly check the length of...

Epic Games Unreal Tournament Server 436.0 Engine Remote Format String Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9840/info A format string vulnerability has been reported to exists in the Unreal Tournament server engine. This issue is due to a failure of the server application to properly sanitize user supplied network data...

Veritas Backup Exec Remote Agent Detection (NDMP)

Network Data Management Protocol NDMP based detection of the Veritas Backup Exec Agent. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Eddie Schwartz of RSA

Eddie Schwartz, CISO of RSA, emphasized the need for enterprises to use the data they have on their networks to help defend against targeted attacks...

TLS response timings can indicate network contents

When Opera receives incorrectly encrypted network data, Opera will detect this, and let the sender know that the data was not understood. Such encrypted error responses are marginally faster than regular responses. An attacker with access to the network, can by replacing network data measure...

[SECURITY] Fedora 16 Update: bacula-5.0.3-33.fc16

Bacula is a set of programs that allow you to manage the backup, recovery, and verification of computer data across a network of different computers. It is based on a client/server architecture and is efficient and relatively easy to use, while offering many advanced storage management features...

DARPA Seeking Help With Targeted Attack Analysis

The networks of government agencies and the military are under constant attack from a variety of sources, and the U.S., like most other countries, relies on those networks to not just run daily operations, but to support missions around the world. In the face of those attacks, the Department of...

CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

CVE-2012-0681

Apple Remote Desktop before 3.6.1 does not recognize the "Encrypt all network data" setting during connections to third-party VNC servers, which allows remote attackers to obtain cleartext VNC session content by sniffing the network...

SAP Crystal Reports buffer overflow

Buffer overflow on network data parsing...

Fedora Update for bacula FEDORA-2012-10929

Check for the Version of bacula OpenVAS Vulnerability Test Fedora Update for bacula FEDORA-2012-10929 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...

samba: Multiple heap-based buffer overflows in memory management based on NDR marshalling code output

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call...