Mozilla Tackles XSS Vulnerabilities, Clickjacking Attacks

Mozilla’s security engineers are working on new technology that promises to mitigate a large class of Web application vulnerabilities, especially the cross-site scripting XSS plague against modern Web browsers. The project, called Content Security Policy, is designed to shut down XSS attacks by...

Specifically Crafted Archive/Container Files can Bypass Initial Scans

SUMMARY Specifically-crafted archive and container files can potentially bypass initial malware scans in some products. AFFECTED PRODUCTS Products --- Symantec Mail Security for Domino Symantec Mail Security for Microsoft Exchange Symantec Mail Security for SMTP Symantec Brightmail Gateway Symant...

IT staffs pressured to relax Web security

From SearchSecurity.com Rob Westervelt IT managers are under pressure from the top executives in their organizations to relax their policies on Web security in order to make users more productive. A new survey of more than 1,000 IT managers found that sales and marketing personnel also are leanin...

Hathaway, Obama administration swing and miss at RSA

Much of the talk at the RSA Conference last week centered on the lack of the unifying theme or big-time story that usually emerges to take over the show by mid-week. But there was, in fact, a major story, and it was the abject failure of the Obama administration, in the person of Melissa Hathaway...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

Design/Logic Flaw

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

CVE-2009-0579 affects Linux-PAM before 1.0.4. The vulnerability is that PAM does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, allowing local users to bypass the intended security policy and change their passwords sooner than allowed. Connected documents corroborate ...

Mandriva Update for dbus MDVSA-2008:054 (dbus)

Check for the Version of dbus OpenVAS Vulnerability Test Mandriva Update for dbus MDVSA-2008:054 dbus Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1

Ubuntu Update for Linux kernel vulnerabilities USN-571-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5711.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libxfont, xorg-server vulnerabilities USN-571-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for xorg-server regression USN-571-2

Ubuntu Update for Linux kernel vulnerabilities USN-571-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN5712.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for xorg-server regression USN-571-2 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

RedHat Update for dbus RHSA-2008:0159-01

Check for the Version of dbus OpenVAS Vulnerability Test RedHat Update for dbus RHSA-2008:0159-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Core 10 FEDORA-2009-1373 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-1373. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are...

Fedora Core 10 FEDORA-2009-1373 (java-1.6.0-openjdk)

The remote host is missing an update to java-1.6.0-openjdk announced via advisory FEDORA-2009-1373. OpenVAS Vulnerability Test $Id: fcore20091373.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1373 java-1.6.0-openjdk Authors: Thomas Reinke Copyrigh...

Xen Guest Detection

According to the MAC address of its network adapter, the remote host is a Xen virtual machine. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid35081; scriptversion "1.11"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"Xen Guest Detection";...

Potentially unwanted software

This script checks for the presence of files and programs which might have been installed without the consent of the user of the remote host. SPDX-FileCopyrightText: 2008 David Maciejak and Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are...

Potentially unwanted software

This script checks for the presence of files and programs which might have been installed without the consent of the user of the remote host. Verify each of the applications found to see if they are compliant with your organization's security policy. OpenVAS Vulnerability Test $Id:...

CVE-2008-3474

CVE-2008-3474 is an information-disclosure vulnerability in Microsoft Internet Explorer 6/7 . IE may fail to correctly determine the origin domain/zone of web scripts, enabling a crafted HTML page to disclose sensitive data across domains. This CVE is addressed within the MS08-058 Cumulative Secu...

CVE-2008-3473

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Eve...