Verbose Error Messages

Under certain conditions, when unexpected input is provided to the web-based management UI, overly verbose error information is delivered back to the client. This does not directly result in any specific vulnerability, however this information is helpful to an attacker. Ref 33139 This issue resul...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 33476 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.0 an...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34299 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...

Obama Administration Opposes CISPA As Congress Amends Proposed Law

The Obama Administration joined the Cyber Intelligence Sharing and Protection Act CISPA debate yesterday when a senior State Department advisor told The Guardian that the White House opposed the controversial bill. CISPA emerged in the wake of the equally controversial Stop Online Piracy Act SOPA...

Fake Government Email Spam Hides Zbot

Attention-piquing malicious spam emails purportedly coming from the DHS, the Pentagon or the Transportation Security Administration have recently been spotted by researchers. Read the full article. Help Net Security...

HP-UX PHCO_28125 : HP-UX Running System Administration Manager (SAM), Local Elevation of Privilege (HPSBUX01104 SSRT4699 rev.3)

s700800 11.00 cumulative SAM/ObAM patch : A potential security vulnerability has been identified with System Administration Manager SAM running on HP-UX that may allow local unauthorized privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this...

PT-1999-1118 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX affected versions not specified Description: A local privilege escalation issue exists in HP-UX, specifically affecting MC/ServiceGuard and MC/LockManager, where local users can exploit the Security Administration Manager SAM to gain...