New getAccess[tm] Vulnerability

Good Morning Listmembers, this is another postingsee 1st here http://www.securityfocus.com/bid/3109 about Entrust s "getAccesstm" product Problem Description: "getAccesstm" still uses default shellscripts which start java-classes for their web-applications. due to missing input-validation it is...

CVE-2000-0954

Shambala Server 4.5 stores passwords in plaintext, enabling local users to obtain passwords and compromise the server. The provided documents do not specify remediation or affected versions beyond 4.5; exploitation details are not described.

Компрометация сервера через URL (URL javascript)

В URL специального вида можно включить javascript, который будет передан атакуемым сервером клиенту. Таким образом можно в контексте клдиента получить доступ к атакуемому серверу...

Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Windows Server 2008, Windows Server 2008 R2 for Itanium-based Systems (KB2518870)

A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft .NET Framework and gain complete control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you m...