20 Years On, the Open Web Faces Challenges

For people of a certain age in the technology industry, one of the ways of establishing a connection with someone is by asking some version of the following question: How long have you been online? Depending upon how you define “online”, the answer can vary from 15 to 25 or even 30 years. But...

WinRM Script Exec Remote Code Execution

This module uses valid credentials to login to the WinRM service and execute a payload. It has two available methods for payload delivery: Powershell 2 and above and VBS CmdStager. The module will check if Powershell is available, and if so uses that method. Otherwise it falls back to the VBS...

Kaspersky Lab Developing Secure Operating System for SCADA

Eugene Kaspersky is working with his engineers at Russian security firm Kaspersky Lab to create a secure-by-design OS for ICS. In an interview Kaspersky said " It's true no one else ever tried to make a secure operating system. This may sound weird because of the many efforts Microsoft, Apple and...

Debian: Security Advisory (DSA-2491-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2012-1245 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Reliability Analysis Metrics Calculation Engine RACEng affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Reliability Analysis Metrics Calculation Engine RACEng due to inadequat...

Debian DSA-2491-1 : postgresql-8.4 - several vulnerabilities

Two vulnerabilities were discovered in PostgreSQL, a SQL database server : - CVE-2012-2143 The crypttext, text function in the pgcrypto contrib module did not handle certain passwords correctly when producing traditional DES-based hashes. Characters after the first 0x80 byte were ignored. -...

Twitter Denies Hacktivists Behind Severe Outage

Twitter officials say it was a “cascading bug” and not the handiwork of hacktivists that brought down the microblogging site today in two separate outages. “This wasn’t due to a hack or our new office or Euro 2012 or GIF avatars, as some have speculated today,” Mazen Rawashdeh, the company’s vice...

DSA-2491-1 postgresql-8.4 - several

Bulletin has no description...

FlexNet License Server Manager lmgrd Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'FlexNet License Server Manager lmgrd...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.1 security and enhancement update

Updated Messaging packages that resolve one security issue, fix multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.1 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...

Moderate: Red Hat Security Advisory: Red Hat Enterprise MRG Messaging 2.1 security and enhancement update

Updated Messaging packages that resolve one security issue, fix multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.1 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...

Description of the update package for Lync Server 2010, Web Components Server: March 2012

Describes the update for Lync Server 2010, Web Components Server that is dated March 2012.SummaryThis article describes the update for Microsoft Lync Server 2010, Web Components Server that is dated March 2012. INTRODUCTIONThis update improves the reliability, stability and performance of Lync...

Ten Years After Gates's Memo, Effects Still Being Felt

Ten years. That’s a really long time. Think about what you were doing 10 years ago. Can you even remember? Maybe you were in college or high school, or cripes, even grade school. Or maybe you were working in security already, trying to figure out why your network kept getting overrun by viruses a...

DHS Names Weatherford as Deputy Under Secretary for Cybersecurity

Department of Homeland Security DHS Secretary Janet Napolitano appointed Mark Weatherford today as the National Protection and Programs Directorate’s NPPD new Deputy Under Secretary for Cybersecurity, according to a press release on the DHS’ site. The role was created by the Directorate in...

Samsung hires Android hacker Cyanogen

Samsung hires Android hacker Cyanogen Steve 'Cyanogen' Kondik is best known as the creator of the CyanogenMod for Android, an after market customised firmware bringing new features and functionality to the Android platform. There's no information yet on whether Samsung is interested in CyanogenMo...

[SECURITY] Fedora 13 Update: jabberd-2.2.11-4.fc13

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

[SECURITY] Fedora 14 Update: jabberd-2.2.14-1.fc14

The jabberd project aims to provide an open-source server implementation of the Jabber protocols for instant messaging and XML routing. The goal of this project is to provide a scalable, reliable, efficient and extensible server that provides a complete set of features and is up to date with the...

Red Hat Enterprise Linux 6.1 Released !

Red Hat Enterprise Linux 6.1 is now available at https://www.redhat.com/rhel/. Enhancements provide improvements in system reliability, scalability and performance, coupled with support for upcoming system hardware. This release also delivers patches and security updates, while maintaining...

Tor 0.2.2.25-alpha released - To Toggle, or not to Toggle & The End of Torbutton!

Tor 0.2.2.25-alpha released - To Toggle, or not to Toggle & The End of Torbutton! Tor 0.2.2.25-alpha fixes many bugs: hidden service clients are more robust, routers no longer overreport their bandwidth, Win7 should crash a little less, and NEWNYM as used by Vidalia's "new identity" buttonnow...

SuSE 11.1 Security Update : Samba (SAT Patch Number 4050)

With this update Samba is not prone to a remote denial of service attack anymore. CVE-2011-0719 Additionally this update also fixes the following reliability bugs : - leaving childs in 'zombie' state - adding new printers without restart - GSSAPI lock AD user account - printer drivers from Window...