IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz (Windows)

IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 11. Ergänzungslieferung 11. EL des IT- Grundschutz. Die...

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz - Windows

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstuetzt. Er wurde zudem in neueren EL gestrichen. Diese Pruefung bezieht sich auf die 10. Ergaenzungslieferung 10. EL des IT- Grundschutz. Die...

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz - Windows

IT-Grundschutz M5.037: Einschraenken der Peer-to-Peer-Funktionalitaeten in einem servergestuetzten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstuetzt. Er wurde zudem in neueren EL gestrichen. Diese Pruefung bezieht sich auf die 11. Ergaenzungslieferung 11. EL des IT- Grundschutz. Die...

IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz (Windows)

IT-Grundschutz M5.037: Einschränken der Peer-to-Peer-Funktionalitäten in einem servergestützten Netz Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die...

Security Best Practice: Blocking BitTorrent

BitTorrent is a peer to peer file sharing protocol used for distributing large amounts of data. It is one of the most common protocols for transferring large files. The use of BitTorrent may circumvent the organizational security policy...

jruby-openssl Gem for JRuby fails to do proper certificate validation

A security problem involving peer certificate verification was found where failed verification silently did nothing, making affected applications vulnerable to attackers. Attackers could lead a client application to believe that a secure connection to a rogue SSL server is legitimate. Attackers...

Congress Calls for Internal Security Review

After a former Congressional staffer exposed some sensitive data on a file-sharing network recently, some lawmakers are calling for the Congress to start an internal review of its own data security policies immediately. The situation, which is linked to an ethics investigation in the House of...

Wowd Search Client 1.3.0 XSS

Exploit for unknown platform in category web applications ============================ Wowd Search Client 1.3.0 XSS ============================ Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time sear...

Wowd Search Client 1.3.0 XSS

No description provided by source. Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Advisore:http://lostmon.blogspot.com/2009/10/ wowd-search-client-multiple-variable.html Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time search engine for...

openSUSE Security Update : strongswan (strongswan-676)

By sending a specially crafted Dead Peer Detection DPD packet remote attackers could crash the pluto IKE daemon CVE-2009-0790. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update strongswan-676. T...

Soulseek 157 NS < 13e/156.* Remote Peer Search Code Execution PoC

Exploit for unknown platform in category dos / poc ================================================================= Soulseek 157 NS 13e/156. Remote Peer Search Code Execution PoC ================================================================= Soulseek 157 NS 13e & 156. Remote Peer Search Code...

Soulseek 157 NS SEH Overwrite

Soulseek 157 NS 13e & 156. Remote Peer Search Code Execution ============================================= - Release date: July 02, 2009 - Discovered by: Laurent Gaffié ; http://g-laurent.blogspot.com/ - Severity: critical ============================================= I. VULNERABILITY...

[InterN0T] TBDev 01-01-2008 - Multiple Vulnerabilities

TBDev - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 01-01-2008 16th January 2008 newest Info: TBDEV.NET is a project to further enhance, update and develop a software php peer-to-peer from the original torrentbits/bytemonsoon source code. Credits: InterN0T External...

TBDev 01-01-2008 XSS / HTML Injection

TBDev - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 01-01-2008 16th January 2008 newest Info: TBDEV.NET is a project to further enhance, update and develop a software php peer-to-peer from the original torrentbits/bytemonsoon source code. Credits: InterN0T External...

TBDev 01-01-2008 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ TBDev 01-01-2008 Multiple Remote Vulnerabilities ================================================ TBDev - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 01-01-2008...

Soulseek 157 NS */ 156.* Remote Distributed Search Code Execution

Exploit for unknown platform in category dos / poc ================================================================= Soulseek 157 NS / 156. Remote Distributed Search Code Execution ================================================================= ============================================= -...

Security fix for the ALT Linux 5 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Security fix for the ALT Linux 6 package strongswan version 4.2.14-alt1

May 13, 2009 Michael Shigorin 4.2.14-alt1 - 4.2.14 fixes CVE-2009-0790: DoS against dead peer detection code - fixed FTBFS with glibc-2.9 - appled vendor patch fixing invalid IKE state issue...

Businesses losing fight against employee apps

From Techworld Maxwell Cooter Enterprises are struggling to control the use of consumer applications within the workplace, despite the panoply of security tools being used within corporates. According to new research paloaltonetworks.com, nearly half of all bandwidth within corporate environments...

p2p-conficker NSE Script

Checks if a host is infected with Conficker.C or higher, based on Conficker's peer to peer communication. When Conficker.C or higher infects a system, it opens four ports: two TCP and two UDP. The ports are random, but are seeded with the current week and the IP of the infected host. By determini...