CVE-2008-7278: Improper Input Validation

The S/MIME feature in Open Ticket Request System OTRS before 2.2.5, and 2.3.x before 2.3.0-beta1, does not properly configure the RANDFILE environment variable for OpenSSL, which might make it easier for remote attackers to decrypt e-mail messages that had lower than intended entropy available fo...

PT-2011-1318

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 2.3.4 Description The issue is related to the S/MIME feature in OTRS, which does not properly configure the RANDFILE and HOME environment variables for OpenSSL. This might make it easier for...

Device-Level Encryption Comes to Android

As attacks on mobile devices such as iPhones, iPads, Android phones and tablets have surged in recent months, security researchers and customers have continued to look for ways to lock down their devices and protect the data they store on them. Whisper Systems has jumped into the fray with...

Debian: Security Advisory (DSA-2173-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Low: Red Hat Security Advisory: rgmanager security and bug fix update

An updated rgmanager package that fixes multiple security issues and several bugs is now available for Red Hat Cluster Suite 4. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

Google Bets $20k Against the Field at 2011 Pwn2Own

Google has announced plans to pay $20,000 to anyone who can successfully exploit a vulnerability in their Chrome browser and infiltrate a Cr-48 Chrome Notebook. Google’ is offering the cash prize as part of Zero Day Initiative’s Pwn2POwn contest which will be taking place March 9-11 during the 20...

PHPCMS 2008 SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tybe: REMOTE SQL iNJECTioN Vendor: www.phpcms.cn + Software: Phpcms 2008 V2 + author: R3d-D3v!L + TEAM: Xp10hACKEr & 403-T3AM ? contact: Xathotmail.co.jp - ? Date: 17.jan.2011 ?...

Fedora Update for nss FEDORA-2010-15897

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2010-15897 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

15 websites defaced by Sami Fakhfakh (S-Man)

15 websites defaced by Sami Fakhfakh S-Man List : https://dollarsos.com/ Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

S-CMS 2.5 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================== S-CMS 2.5 Multiple Vulnerabilities ================================== ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS...

S_CMS 2.5 - Multiple Vulnerabilities

SCMS 2.5 - Multiple Vulnerabilities ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cm...

S_CMS 2.5 - Multiple Vulnerabilities

============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cms/ Vulnerability Type: Full Path...

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow

Realtek HD Audio Control Panel 2.1.3.2 - Local Buffer Overflow done by BraniX www.hackers.org.pl found: 2010.08.24 tested on: Windows XP SP3 Home Edition SafeSEH bypass App. has classic buffer overflow vulnerability it can be triggered by passing a too long argument as a startup parameter...

[SECURITY] Fedora 12 Update: nss-3.12.8-2.fc12

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Fedora Update for nss FEDORA-2010-15520

Check for the Version of nss OpenVAS Vulnerability Test Fedora Update for nss FEDORA-2010-15520 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 14 Update: nss-3.12.8-2.fc14

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 13 Update: nss-3.12.8-2.fc13

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

GNU C library dynamic linker expands $ORIGIN in setuid library search path

Overview Certain versions of glibc unsafely handle the $ORIGIN ELF substitution sequence which can be exploited to gain local privilege escalation. Description Tavis Ormandy's advisory states:"$ORIGIN is an ELF substitution sequence representing the location of the executable being loaded in the...

SuSE 10 Security Update : evolution-data-server (ZYPP Patch Number 7029)

The following bugs have been fixed : evolution considered S/MIME signatures to be valid even for modified mails CVE-2009-0547. specially crafted base64 encoded messages could cause a heap buffer overflow CVE-2009-0587. A POP3 server sending overly long lines could crash evolution. %NASLMINLEVEL...

PT-2010-5047

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM FastBack versions 5.5.0.0 through 5.5.6.0 IBM Tivoli Storage Manager TSM FastBack versions 6.1.0.0 through 6.1.0.1 Description The issue involves multiple stack-based buffer overflows in FastBackServer.exe,...