CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

USN-898-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not correctly handle monitor hotplugging. An attacker with physical access could cause gnome-screensaver to crash and gain access to the locked session...

Fedora SSSD绕过Kerberos认证漏洞

BUGTRAQ ID: 37747 CVE ID: CVE-2010-0014 系统安全服务守护程序（SSSD）用于在Fedora系统中提供一些安全服务。 在配置了krb5 authprovider但KDC不可到达的情况下，SSSD允许物理接触的本地用户通过任意口令认证到使用Kerberos TGT工作站上的受到锁屏保护的程序。 Fedora SSSD 1.0.1 厂商补丁： Fedora ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1...

Design/Logic Flaw

Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program...

[USN-868-1] GRUB 2 vulnerability

=========================================================== Ubuntu Security Notice USN-868-1 December 09, 2009 grub2 vulnerability CVE-2009-4128 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 This advisory also appli...

Ubuntu: Security Advisory (USN-866-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MS Says Bitlocker Threat Pretty Low

Microsoft dismissed recently-disclosed threats to its BitLocker disk-encryption technology as “relatively low risk,” noting that attackers must not only have physical access to a targeted PC, but must manipulate the machine two separate times. Read the full article. Computerworld...

Ubuntu 9.10 : gnome-screensaver vulnerability (USN-866-1)

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

USN-866-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

'Moderate' Flaw Hits Adobe Photoshop Elements

Adobe has shipped a patch to cover a security vulnerability affecting its Photoshop Elements software product. The flaw, rated moderate, affects Adobe Photoshop Elements versions 8.0 and 7.0. It could be exploited by a hacker with valid login credentials and/or physical access to execute arbitrar...

Check Point response to the "Evil Maid" attack

Symptoms Check Point Full Disk Encryption is not vulnerable to the "Evil Maid" attack. Solution Full technical details of the "Evil Maid" attack Check Point Full Disk Encryption is not vulnerable to the "Evil Maid" attack, as this particular program specifically targets the True Crypt boot code,...

Microsoft Virtual PC and Virtual Server Privilege Escalation Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a privilege-escalation vulnerability caused by an error in decoding privileged instructions. Note that this issue affects only systems that do not use hardware-assisted virtualization. Successful exploits may allow local attackers t...

CVE-2009-1163

Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service memory consumption via unspecified TCP packets...

Memory corruption

Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service memory consumption via unspecified TCP packets...

Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Physical Access Gateway Denial of Service Vulnerability Advisory ID: cisco-sa-20090624-gateway Revision 1.0 For Public Release 2009 June 24 1600 UTC GMT...

Cisco Physical Access Gateway DoS

Memory leaks on HTTPs processing...

CVE-2009-1163

CVE-2009-1163 concerns the Cisco Physical Access Gateway. The vulnerability is a memory leak in the gateway when processing certain TCP traffic, potentially enabling remote attackers to trigger a denial of service through memory exhaustion. Affected software versions are prior to 1.1; Cisco confi...

CVE-2009-1163

Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service memory consumption via unspecified TCP packets...

Cisco Physical Access Gateway Denial of Service Vulnerability

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...