[SECURITY] Fedora 13 Update: postgresql-8.4.7-1.fc13

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

CVE-2011-0922

Summary: CVE-2011-0922 affects HP Data Protector Client. A vulnerability in processing the EXEC_SETUP (and related EXEC_CMD/INSTALL/EXEC_SETUP) messages allows a remote attacker to force the client to load and execute arbitrary programs from a remote SMB share, enabling remote code execution. The...

[SECURITY] Fedora 14 Update: postgresql-8.4.7-1.fc14

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, subselects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL DB...

CVE-2011-0639

Apple Mac OS X does not properly warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that the...

Default configuration

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a...

Null pointer dereference

Microsoft Windows does not properly warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that...

CVE-2011-0640

The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a...

CVE-2011-0638

Microsoft Windows does not properly warn the user before enabling additional Human Interface Device HID functionality over USB, which allows user-assisted attackers to execute arbitrary programs via crafted USB data, as demonstrated by keyboard and mouse data sent by malware on a smartphone that...

Google Releases Permanent Opt-Out Extension For Chrome

Google has delivered a new tool that enables Chrome users to permanently opt out of ad-tracking cookies in the company’s browser. The new extension gives users the ability to make their choices about not being tracked by online advertisers permanent, at least in Google Chrome. The move by Google ...

PandaLabs Uncovers the Cyber-Crime Black Market

Inventory is growing and prices are dropping on the cyber crime black market, according to a new report from security firm Panda Labs. Stolen banking credentials, malicious programs and stolen credit cards are all for sale online in what Panda experts say is a flourishing criminal black market...

Expert: Stuxnet Just Latest in U.S. Hacks of Covert Nuke Programs

CORRECTION: This article originally included the incorrect name for an associate of A.Q. Khan. The correct name of the associate is “Friedrich Tinner,” a Swiss nuclear engineer. The name has been corrected in the article. The author of a new book on the evolution of the world’s first nuclear blac...

Ubuntu Update for eglibc, glibc vulnerability USN-1009-2

Ubuntu Update for Linux kernel vulnerabilities USN-1009-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN10092.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for eglibc, glibc vulnerability USN-1009-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-1009-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : eglibc, glibc vulnerability (USN-1009-2)

USN-1009-1 fixed vulnerabilities in the GNU C library. Colin Watson discovered that the fixes were incomplete and introduced flaws with setuid programs loading libraries that used dynamic string tokens in their RPATH. If the 'man' program was installed setuid, a local attacker could exploit this ...

Mobile Device Users More Susceptible to Phishing Scams

Mobile devices are making us dumber – at least when it comes to security, according to research conducted by security firm Trusteer. Research published by the company found that smartphone and computer tablet users are three times more susceptible to email phishing scams than traditional PC and...

Microsoft Releases Security Advisory

Microsoft has released security advisory 2490606 to alert users of a vulnerability affecting the Windows Graphics Rendering Engine. Exploitation of this vulnerability may allow an attacker to install programs; view, change, or delete data; or create new accounts with full user rights. US-CERT...

WikiLeaks Prompts Federal Agencies to Assess Infosec Programs for Sensitive Data

In response to the embarrassment and perceived threat resulting from the WikiLeaks disclosures in recent months, the Office of Management and Budget has issued a hefty memo with pages of questions that federal agencies must use to conduct an initial assessment of their programs to handle and...

Mandriva Update for xulrunner MDVA-2010:242 (xulrunner)

Check for the Version of xulrunner OpenVAS Vulnerability Test Mandriva Update for xulrunner MDVA-2010:242 xulrunner Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Virus War : Be aware of bogus e-mails !

The past year reached a new record high for bogus e-mails that clog people's inboxes and can release damaging and costly viruses on computers. Nearly 90 percent of sent e-mail is a ruse to rip off unsuspecting Internet users, according to data released by the computer security firm Symantec. The...

Facebook Revises Bug Disclosure Policy

Social networking behemoth Facebook revised their bug disclosure policy last week to protect well-intentioned vulnerability researchers from potential lawsuits stemming from their discoveries. The revisions, which were made with the assistance of the Electronic Frontier Foundation, are part of...