569 matches found
The time has come for an industry Patch Week
Patch management has become, in the words of one bleary-eyed IT guy, “just freaking ridiculous.” Here’s a look at what this IT guy, whose primary role is managing risk at a medium-sized business, was up against in the last two weeks: May 22 — Novell released updates for GroupWise 7 and 8 to addre...
MS09-024: Vulnerability in Microsoft Works Converters Could Allow Remote Code Execution (957632)
The remote host is running a version of Microsoft Works for Windows document converters that is affected by a buffer overflow vulnerability. If an attacker can trick a user on the affected host into opening a specially crafted Works file, this issue could be leveraged to run arbitrary code on the...
Rich Mogull on Mac security, the Cybersecurity Czar and Project Quant
Dennis Fisher talks with Securosis founder Rich Mogull about Mac security, Obama’s cybersecurity plan and his Project Quantpatch-management work with Microsoft. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...
Patch Tuesday barrage: A bad case of amnesia
Yesterday was a perfect example of the lack of communication between software vendors and their customers about security. Three vendors released major patches for serious bugs, all within hours of each other. You would think that customers would be a high priority for all vendors, especially in...
AIX 530008 : U822108
The remote host is missing AIX PTF U822108 which is related to the security of the package devices.chrplpar.base.ras You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...
Solaris 2.6 (x86) : 106272-09
SunOS 5.6x86: /usr/lib/security/pamunix.. Date this patch was last updated by Sun : Jan/04/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
AIX 530008 : U819227
The remote host is missing AIX PTF U819227 which is related to the security of the package bos.net.ipsec.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 610001 : U819817
The remote host is missing AIX PTF U819817 which is related to the security of the package X11.apps.xterm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530009 : U819952
The remote host is missing AIX PTF U819952 which is related to the security of the package devices.pci.df1000f7.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...
AIX 530008 : U819205
The remote host is missing AIX PTF U819205 which is related to the security of the package bos.adt.libm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530008 : U820907
The remote host is missing AIX PTF U820907 which is related to the security of the package devices.pci.c1110358.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...
Microsoft to unveil patch management metrics project
Microsoft on Wednesday plans to launch a new research effort to determine the total cost of the patch-management cycle, from testing and distributing a fix to user deployment of the patch. The end result of the project, which will be completely open and transparent to outsiders, will be a full...
Patchlink Detection
The remote host has a patch management software installed on it. Description : This script uses Windows credentials to detect whether the remote host is running Patchlink and extracts the version number if so. Patchlink is a fully Internet-based, automated, cross-platform, security patch manageme...
Patchlink Detection
The remote host has a patch management software installed on it. Description : This script uses Windows credentials to detect whether the remote host is running Patchlink and extracts the version number if so. Patchlink is a fully Internet-based, automated, cross-platform, security patch manageme...
CA ARCserve Backup Discovery Service Denial of Service Vulnerability
Title: CA ARCserve Backup Discovery Service Denial of Service Vulnerability CA Advisory Date: 2008-06-17 Reported By: Luigi Auriemma Impact: A remote attacker can cause a denial of service. Summary: CA ARCserve Backup contains a vulnerability in the Discovery service casdscsvc that can allow a...
[security bulletin] HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01362558 Version: 1 HPSBST02312 SSRT071428 rev.1 - HP StorageWorks Storage Mirroring Software, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted...
AIX 530006 : U816738
The remote host is missing AIX PTF U816738 which is related to the security of the package bos.mp You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
AIX 530005 : U810288
The remote host is missing AIX PTF U810288 which is related to the security of the package devices.pci.2b102725.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...
AIX 530005 : U807620
The remote host is missing AIX PTF U807620 which is related to the security of the package bos.sysmgt.nim.spot You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
Code injection
PatchLink Update client for Unix, as used by Novell ZENworks Patch Management Update Agent for Linux/Unix/Mac LUM 6.2094 through 6.4102 and other products, allows local users to 1 truncate arbitrary files via a symlink attack on the /tmp/patchlink.tmp file used by the logtrimmer script, and 2...