Scientific Linux Security Update : bind on SL5.x, SL4.x, SL3.x i386/x86_64

A flaw was found in the way BIND generates outbound DNS query ids. If an attacker is able to acquire a finite set of query IDs, it becomes possible to accurately predict future query IDs. Future query ID prediction may allow an attacker to conduct a DNS cache poisoning attack, which can result in...

Quagga < 0.99.21 BGP Denial of Service Vulnerability

According to its self-reported version number, the installation of Quagga's BGP daemon listening on the remote host is affected by a denial of service vulnerability. Unauthenticated attackers on the local network can trigger this issue by leveraging a BGP peering relationship and sending a...

CVE-2012-0174: Undefined Security Weakness

Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outbound broadcast packets, which allows remote attackers to obtain potentially sensitive information by observing broadca...

PT-2012-2372

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description A security feature bypass issue exists due to the way Windows Firewall handles outbound broadcast packets. This could allow remote attackers to obtain potentially sensitive information by...

Active Outbound Connection to Host Listed in Known Bot Database

This plugin has been temporarily disabled. Nessus has determined via netstat, that the remote host has an outbound connection to one or more hosts that are listed in a public database as part of a botnet. This suggests the host may have been compromised. Binary data ipthreatlookupnetstat.nbin...

FreePBX Remote Exploit

FreePBX web interface remote vulnerability The admin username and password for the web interface is stored in plain text in this publicly accessible file: http://yourip/admin/modules/framework/bin/genampconf.php Which allows a hacker to access the web GUI and view the secretspasswords for each...

New Worm Morto Using RDP to Infect Windows PCs

A new worm called Morto has begun making the rounds on the Internet in the last couple of days, infecting machines via RDP Remote Desktop Protocol. The worm is generating a large amount of outbound RDP traffic on networks that have infected machines, and Morto is capable of compromising both...

PT-2011-3519 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2, 3.5.1, and 4 Description: An information disclosure issue exists due to improper validation of the trust level within the System.Net.Sockets namespace. This allows remote attackers to obtain sensitiv...

CVE-2011-1978: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

New WhisperMonitor Tool Gives Users Control of Android Security and Privacy Options

As the concerns surrounding the data collected and transmitted by mobile apps continue to grow, Whisper Systems, a small start-up, has released WhisperMonitor, a free tool that enables owners of Android phones to control exactly what each of their installed apps can do and monitor what data is se...

DEBIAN-CVE-2011-1492

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets CSS stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain...

CVE-2011-1492

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets CSS stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain...

CVE-2011-1492

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets CSS stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain...

PT-2011-3164

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 0.5.1 Description The issue allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain sensitive information, via a crafted request. This is due to t...

CVE-2011-1492: Improper Input Validation

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets CSS stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain...

Ubuntu Update for quagga vulnerabilities USN-1027-1

Ubuntu Update for Linux kernel vulnerabilities USN-1027-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10271.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for quagga vulnerabilities USN-1027-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

ASPR #2010-12-14-1: Remote Binary Planting in Windows Address Book

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-12-14-1 ------------------------------------------------------------------------- ASPR 2010-12-14-1: Remote Binary Planting in Windows Address Book...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS : quagga vulnerabilities (USN-1027-1)

It was discovered that Quagga incorrectly handled certain Outbound Route Filtering ORF records. A remote authenticated attacker could use this flaw to cause a denial of service or potentially execute arbitrary code. The default compiler options for Ubuntu 8.04 LTS and later should reduce the...

USN-1027-1: Quagga vulnerabilities

It was discovered that Quagga incorrectly handled certain Outbound Route Filtering ORF records. A remote authenticated attacker could use this flaw to cause a denial of service or potentially execute arbitrary code. The default compiler options for Ubuntu 8.04 LTS and later should reduce the...

CVE-2010-2639

CVE-2010-2639 affects IBM WebSphere Commerce Enterprise 7.0 prior to 7.0.0.2. The issue arises from access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, tied to caching of mutable objects and concurrency issues, enabling remote attackers to read messages intended for o...