MS Says Bitlocker Threat Pretty Low

Microsoft dismissed recently-disclosed threats to its BitLocker disk-encryption technology as “relatively low risk,” noting that attackers must not only have physical access to a targeted PC, but must manipulate the machine two separate times. Read the full article. Computerworld...

Ubuntu 9.10 : gnome-screensaver vulnerability (USN-866-1)

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

USN-866-1: gnome-screensaver vulnerability

It was discovered that gnome-screensaver did not always re-enable itself after applications requested it to ignore idle timers. This may result in the screen not being automatically locked after the inactivity timeout is reached, permitting an attacker with physical access to gain access to an...

Losing the Echo Chamber in the Critical Infrastructure Security Debate

As an analyst, and now as a consultant, I raise issues of digital and physical security: let’s talk about them, in plain terms, and collectively move to do something. As a member of the security digerati, I think we should be helping people, and we have to either step up with a better way forward...

'Moderate' Flaw Hits Adobe Photoshop Elements

Adobe has shipped a patch to cover a security vulnerability affecting its Photoshop Elements software product. The flaw, rated moderate, affects Adobe Photoshop Elements versions 8.0 and 7.0. It could be exploited by a hacker with valid login credentials and/or physical access to execute arbitrar...

Check Point response to the "Evil Maid" attack

Symptoms Check Point Full Disk Encryption is not vulnerable to the "Evil Maid" attack. Solution Full technical details of the "Evil Maid" attack Check Point Full Disk Encryption is not vulnerable to the "Evil Maid" attack, as this particular program specifically targets the True Crypt boot code,...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

Talking about the Ring0 privilege of obtain-vulnerability warning-the black bar safety net

Recently been trying to write a program to kill 3 6 0, but encountered a lot of trouble, even if elevated, the 能干 掉 Winlogon.exe 也 干 不 掉 360tray.exe depressed for half a day. Don't know 3 6 0 what weird means. Then find the Find the previous comparison of the bovine X-virus Panda burning incense...

CVE-2009-3486

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...

Design/Logic Flaw

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

CVE-2009-2201

The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog...

Null pointer dereference

CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...

Design/Logic Flaw

The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service physical damage, modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue ...

CVE-2008-7020

McAfee SafeBoot Device Encryption 4 build 4750 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer after use, which allows local users to obtain sensitive information by reading the physical memory locations associated with this buffer...

kernel security and bug fix update

2.6.9-89.0.7.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...

ASUS Eee PC and other series: BIOS SMM privilege escalation vulnerabilities

Numerous System Management Mode SMM privilege escalation vulnerabilities in ASUS motherboards including Eee PC series Release Date: 07.08.09 Timeline: March 08, 2009: first attempt to contact vendor, no response March 16, 2009: second attempt to contact vendor, no response July 18, 2009: CERT...

kernel security and bug fix update

2.6.18-128.4.1.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

Microsoft Virtual PC and Virtual Server Privilege Escalation Vulnerability

Description Microsoft Virtual PC and Virtual Server are prone to a privilege-escalation vulnerability caused by an error in decoding privileged instructions. Note that this issue affects only systems that do not use hardware-assisted virtualization. Successful exploits may allow local attackers t...

GLSA-200907-08 : Multiple Ralink wireless drivers: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-08 Multiple Ralink wireless drivers: Execution of arbitrary code Aviv reported an integer overflow in multiple Ralink wireless card drivers when processing a probe request packet with a long SSID, possibly related to an...

kernel security and bug fix update

2.6.9-89.0.3.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race avoidanc...