Iran blocks most virtual private network (VPN) services

IRAN has spent years fending off cyber attacks, blocking access and isolated their own intranet off from the outside world. Many Iranians was using of virtual private network VPNs, which provides encrypted links directly to private networks based abroad, to access Sites like YouTube and Facebook...

Cisco AnyConnect Secure Mobility Client IPsec Certificate Validation Vulnerability

Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks. The vulnerability exists because the affected software does not perform certificate name checking in an X.509 certificate when the software i...

Travel Security Rundown

Summer travel season is well under way and considering the increasingly common reports detailing device seizures and data searches at international borders, you want to be very careful about the things you travel with. In a recently published SecureList article, Kaspersky Lab expert Dmitry...

IBM Lotus Mobile Connect重定向URL跨站脚本漏洞

IBM Lotus Mobile Connect是一款通信软件平台，可为企业提供了一个移动虚拟私人网络。 提交给HTTP访问服务重定向URL的输入在返回用户之前缺少过滤，可被利用执行在用户浏览器上任意HTML和脚本代码。 IBM Lotus Mobile Connect 6.x 厂商解决方案 IBM Lotus Mobile Connect 6.1.4 build 20110909已经修复此漏洞，建议用户下载使用： http://www-947.ibm.com/support/entry/portal/Overview/Software/Lotus/LotusMobileConnect...

RSA Hack Yields SecurID Secrets

RSA Security, a division of EMC Corp. has admitted that it was the victim of a sophisticated attack that resulted in the theft of secrets related to its SecurID two-factor authentication product. The disclosure came in a blog post by RSA chief Art Coviello on Thursday. Coviello said that the...

TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR)

Trustwave's SpiderLabs Security Advisory TWSL2011-002: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways SMCD3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcast http://comcast.com and SMC http://www.smc.com Product:...

Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities

Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities Trustwave's SpiderLabs Security Advisory TWSL2011-002: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways D3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcas...

Comcast DOCSIS 3.0 Business Gateways XSRF / Session Management

Trustwave's SpiderLabs Security Advisory TWSL2011-001: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways SMCD3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcast http://comcast.com and SMC http://www.smc.com Product:...

PT-2010-2175 · Thegreenbow · Thegreenbow Ipsec Vpn Client

Name of the Vulnerable Software and Affected Versions: TheGreenBow IPSec VPN Client versions 4.51.001 through 4.65.003 Description: A stack-based buffer overflow issue exists, allowing user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy .tgb...

[SECURITY] Fedora 10 Update: openswan-2.6.21-2.fc10

Openswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

RHEL 5 : kernel (RHSA-2009:0473)

Updated kernel packages that fix several security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

RedHat Security Advisory RHSA-2009:0402

The remote host is missing updates announced in advisory RHSA-2009:0402. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provide both authentication and encryption services. These services allow you to build...

RHEL 5 : openswan (RHSA-2009:0402)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:0402 advisory. Openswan is a free implementation of Internet Protocol Security IPsec and Internet Key Exchange IKE. IPsec uses strong cryptography to provi...

Sql injection

The IPv6 Neighbor Discovery Protocol NDP implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity, read private network traffic, and possibly execute...

SOL9528 - IPv6 Neighbor Discovery Protocol (NDP) vulnerability - CVE-2008-2476 - VU#472363

The IPv6 Neighbor Discovery Protocol NDP implementation does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic by way of a spoofed message that modifies the Forward Information Ba...

CVE-2008-2476

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

CVE-2008-4404

The IPv6 Neighbor Discovery Protocol NDP implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic via a spoofed message that modifies the Forwa...

Sql injection

The IPv6 Neighbor Discovery Protocol NDP implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic via a spoofed message that modifies the Forwa...

Design/Logic Flaw

The IPv6 Neighbor Discovery Protocol NDP implementation in 1 FreeBSD 6.3 through 7.1, 2 OpenBSD 4.2 and 4.3, 3 NetBSD, 4 Force10 FTOS before E7.7.1.1, 5 Juniper JUNOS, and 6 Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery messages, which allows remote attacke...

CVE-2008-4404

The IPv6 Neighbor Discovery Protocol NDP implementation on IBM zSeries servers does not validate the origin of Neighbor Discovery messages, which allows remote attackers to cause a denial of service loss of connectivity or read private network traffic via a spoofed message that modifies the Forwa...