PT-2012-3807

Name of the Vulnerable Software and Affected Versions Openstack Compute Nova versions 2011.3 through 2012.1 Description The issue allows remote authenticated users with certain permissions to cause a denial of service by consuming CPU and hard drive resources via a network request that triggers a...

CVE-2012-2101: Undefined Security Weakness

Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...

PT-2012-6312

Name of the Vulnerable Software and Affected Versions Openstack Compute Nova versions 2011.3 through 2012.1 Description The issue allows remote authenticated users with certain permissions to cause a denial of service by consuming CPU and hard drive resources via a network request that triggers a...

Microsoft's SDL Expands Beyond Redmond

It’s been more than 10 years now since Microsoft began the initiative that would eventually become Trustworthy Computing, and while the effects it’s had inside the company have been well documented, the utility and adoption of the Security Development Lifecycle by outside organizations and...

HP Business Service Management 9.12 remote code execution vulnerability

Overview The HP Business Service Management HPBSM application contains a remote code execution vulnerability. Version 9.12 has been reported to be affected but other versions may also be affected. Description HPBSM uses the JBOSS application server. In the default configuration, HPBSM contains op...

DEBIAN-CVE-2012-2110

The asn1d2ireadbio function in crypto/asn1/ad2ifp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service memory corruption or possibly have...

CVE-2012-2101

Openstack Compute Nova Folsom, 2012.1, and 2011.3 does not limit the number of security group rules, which allows remote authenticated users with certain permissions to cause a denial of service CPU and hard drive consumption via a network request that triggers a large number of iptables rules...

McAfee Web Gateway 7.1.5.x - Host HTTP Header Security Bypass

McAfee Web Gateway 7.1.5.x - Host HTTP Header Security Bypass source: https://www.securityfocus.com/bid/53015/info McAfee Web Gateway is prone to a security-bypass vulnerability because it fails to properly enforce filtering rules. A successful attack will allow an attacker to bypass intended...

McAfee Web Gateway 7.1.5.x - 'Host' HTTP Header Security Bypass

source: https://www.securityfocus.com/bid/53015/info McAfee Web Gateway is prone to a security-bypass vulnerability because it fails to properly enforce filtering rules. A successful attack will allow an attacker to bypass intended security restrictions; this may aid in other attacks. McAfee Web...

Cloudworm - Candidate MS12-020 - POC

Cloudworm - Candidate MS12-020 - POC How secure are cloud servers? In technical circles, people are aware of the cloud variables and that cloud service providers offload the virtual machine security onto the customer as much as possible. Technical people know this. Not all cloud customers fall...

LG-Nortel ELO GS24M Switch contains multiple vulnerabilities

Overview The LG-Nortel ELO GS24M switch web management interface contains multiple vulnerabilities including; authentication bypass CWE-592 and information exposure CWE-200. Description The LG-Nortel ELO GS24M switch web management interface authentication can be bypassed by accessing URL's for...

Google Chrome Goes Down in Early Stage of Pwn2Own

VANCOUVER–A group of researchers from VUPEN, a French security firm, was able to compromise Google Chrome in the initial stages of the Pwn2Own contest. But because of the new rules this year, that doesn’t guarantee them a win in the contest. Rather, it just gives them a nice head start. The...

CVE-2011-3443

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash via vectors related to improper list management for Cascading Style Sheets CSS @font-face rules...

CVE-2011-3443

Use-after-free vulnerability in WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service heap memory corruption and application crash via vectors related to improper list management for Cascading Style Sheets CSS @font-face rules...

CVE-2011-3443

CVE-2011-3443 affects WebKit used by Apple Safari prior to 5.0.6. The flaw is a use-after-free in CSS @font-face handling caused by improper list management, enabling remote code execution or a denial of service through heap memory corruption and application crashes. Affected software: WebKit/Saf...

initscripts security and bug fix update

8.45.42-1.0.1.el5 - Update oracle-enterprise.patch to do detection on /etc/oracle-release and /etc/enterprise-release - Patch x8664 sysctl.conf as well as default sysctl.conf - Patch sysctl.conf to default rpfilter to loose reverse path filtering has no effect for pre-2.6.32 kernels orabug 102862...

EU to Propose New Data Breach, Privacy Regulations

The European Union EU is preparing to propose new rules that will require companies to disclose data breaches within 24 hours, according to reports. The new rules are aimed at protecting customers and reducing bureaucracy, EU Justice Commissioner Viviane Reding explained in a speech at a conferen...

Fedora 16 : libvirt-0.9.6-4.fc16 (2011-17267)

This release of libvirt fixes a minor security problem with extraneous iptables rules being added when an externally managed network new feature in 0.9.4 exists, along with several bugfixes. Another important change in this release is code to automatically convert guest definitions containing the...

Critical: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The Spy Files: Wikileaks expose Mobile Phone, Email Hacking capability

The Spy Files: Wikileaks expose Mobile Phone, Email Hacking capability Wikileaks has released dozens of new documents highlighting the state of the once covert, but now lucrative private sector global surveillance industry. According to Assange, over 150 private sector organisations in 25 countri...