Amazon Linux: Security Advisory (ALAS-2015-622)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: xfsprogs

Issue Overview: It was discovered that the xfsmetadump tool of the xfsprogs suite did not fully adhere to the standards of obfuscation described in its man page. In case a user with the necessary privileges used xfsmetadump and relied on the advertised obfuscation, the generated data could contai...

LATENTBOT: Trace Me If You Can

FireEye Labs recently uncovered LATENTBOT, a new, highly obfuscated BOT that has been in the wild since mid-2013. It has managed to leave hardly any traces on the Internet, is capable of watching its victims without ever being noticed, and can even corrupt a hard disk, thus making a PC useless...

LATENTBOT: Trace Me If You Can

FireEye Labs recently uncovered LATENTBOT, a new, highly obfuscated BOT that has been in the wild since mid-2013. It has managed to leave hardly any traces on the Internet, is capable of watching its victims without ever being noticed, and can even corrupt a hard disk, thus making a PC useless...

CentOS 7 : xfsprogs (CESA-2015:2151)

Updated xfsprogs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

xfsprogs security update

CentOS Errata and Security Advisory CESA-2015:2151 Updated xfsprogs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerabili...

xfsprogs: xfs_metadump information disclosure flaw

It was discovered that the xfsmetadump tool of the xfsprogs suite did not fully adhere to the standards of obfuscation described in its man page. In case a user with the necessary privileges used xfsmetadump and relied on the advertised obfuscation, the generated data could contain unexpected...

Low: Red Hat Security Advisory: xfsprogs security, bug fix and enhancement update

Updated xfsprogs packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Two New Strains of POS Malware, Cherry Picker, Abaddon, Surface

Point of sale malware has gotten more sophisticated as we inch closer to the two-year anniversary of the Target data breach. Now, two weeks from the biggest shopping day of the year, two new and different strains of point of sale malware have come to light, including one that’s gone largely...

Adobe Flash Player & Compiler Arbitrary Code Execution Vulnerability

Adobe Flash Player, Adobe AIR SDK, and Adobe AIR SDK & Compiler are products of Adobe, Incorporated.Adobe Flash Player is a multimedia player; Adobe AIR SDK and Adobe AIR SDK & Compiler are standard development kits for Adobe AIR a cross-OS runtime environment. Adobe Flash Player is a multimedia...

XcodeGhost Malware Supports iOS9

New samples of XcodeGhost, malware targeting iOS devices, have surfaced beyond the borders of China with new support for iOS9 and obfuscation techniques making it that much harder to detect. iOS9 is only a few weeks old and included new security measures that allowed for only secure HTTPS...

Apple OS X Kernel Elevation of Privilege Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. A security vulnerability in the kernel of Apple OS X versions prior to 10.11.1 can be exploited by a local attacker to elevate privileges via type obfuscation in Mach task handling...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2015-06714)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. A security vulnerability exists in the implementation of Adobe Flash Player versions prior to 18.0.0.255, 19.x-19.0.0.226 Windows and OS X, and 11.2.202.540 Linux. A remote attacker could exploit the...

Adobe Flash Player Type Obfuscation Vulnerability (CNVD-2015-06713)

FlashPlayer is a high-performance, lightweight and very expressive client-side runtime player. A security vulnerability exists in the implementation of Adobe Flash Player versions prior to 18.0.0.255, 19.x-19.0.0.226 Windows and OS X, and 11.2.202.540 Linux. A remote attacker could exploit the...

Apple to Remove Apps Using Private APIs

Apple said it will remove 256 misbehaving apps from its App Store that were using private APIs to pull personal and device information that would allow a user to be tracked. SourceDNA, an analytics company that specializes in studying the iOS and Android mobile app stores, privately disclosed to...

DARPA Protecting Software From Reverse Engineering Through Obfuscation

Researchers with a DARPA-led team are looking into new ways to combat reverse engineering by using obfuscation to tidy up shoddy commercial and government security. Researchers with the unit, dubbed the SafeWare program, are hoping to develop new methods, bolstered by encryption, to obscure...

UBUNTU-CVE-2012-2150

xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...

Information disclosure

xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...

CVE-2012-2150

xfsmetadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information by reading a generated image...

CVE-2012-2150

CVE-2012-2150 affects xfs_metadump in xfsprogs before 3.2.4. The underlying flaw does not properly obfuscate file data, allowing remote attackers to obtain sensitive information by reading a generated image. Public references in connected advisories/plugins confirm patches to 3.2.4 or newer acros...