Chinese hackers targeted House of Commons !

Chinese hackers not only attacked key federal departments: they also cracked into the computer system of the House of Commons, targeting MPs with large ethnic Chinese constituencies, CTV News has learned. Sources say Canada's secret cyber spy agency -- the Communications Security Establishment --...

VMSA-2009-0009 : ESX Service Console updates for udev, sudo, and curl

a. Service Console package udev A vulnerability in the udev program did not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. The Common Vulnerabilities and Exposures Project cve.mitre.org has...

Moderate: Red Hat Security Advisory: dhcp security update

Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

HOLD — HBGary Federal News…

HBGary Federal, the beleagured security startup that has been the target of the online mischief making group Anonymous for the last week said on Monday that it was ceasing operations | its CEO Aaron Barr was stepping down. The consulting firm, a wholly owned subsidiary of HBGary Inc., had been...

Hackers use Chinese firm's servers !

Beijing - A Chinese man cited by a US security firm as being linked to cyberspying on Western oil companies said on Friday his company rents server space to hundreds of hackers. The disclosure highlighted the pervasiveness of both professional and amateur hacking in China, a leading source of...

Stack overflow

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and...

CVE-2011-0975

CVE-2011-0975 affects BMC PATROL family products. A stack-based buffer overflow in the PATROL Agent Service Daemon allows remote code execution via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768. Affected components include Performance Analysis for Servers, Performance As...

CVE-2011-0684

Opera before 11.01 does not properly handle redirections and unspecified other HTTP responses, which allows remote web servers to obtain sufficient access to local files to use these files as page resources, and consequently obtain potentially sensitive information from the contents of the files,...

Darkshell Botnets Targeting Chinese Manufacturers With DDoS Attacks

Researchers are tracking a new bot that originated in China and is being used by various associated botnets that are hammering away with DDoS attacks aimed at several dozen targets around the world, including a number of telecom companies and specialized manufacturers. The piece of malware behind...

[SECURITY] Fedora 14 Update: proftpd-1.3.3d-1.fc14

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Amazon Web Hosting Company Is now Hosting DNS Service !

Web hosting company has announced that Amazon would have access to the Domain Name System DNS services, the game will give the DNS hosting as well. Thus, Route 53 will become part of the web hosting, pay-as-you-go DNS hosting service, which pays the amount of DNS issues can be resolved. DNS is th...

Fedora Web Site Hacked, But the Servers Undamaged !

An attacker who had credentials and the use of taxpayer Fedora Fedora server, but the project leaders say the assailants apparently managed to compromise any software or servers. An attacker has attempted to compromise the servers for the Fedora Project, the community version of Red Hat Enterpris...

Government Sites, Military And Educational For Sale By Hackers !!

A hacker has a number of sites belonging to government agencies, military and educational for sale on internet forums. The discovery was made by Noa Bar-Yosef, a senior security strategist at security vendor Imperva. Bar-Yosef, wrote about it in the company's blog last Friday, noting that prices...

SuSE 11.1 Security Update : Xorg (SAT Patch Number 2968)

The X.Org X11 Server was updated to fix several bugs and 2 security issues : - This fix adds a workaround for overlapping stacks and heaps in case of OOM conditions.This workaround is necessary if the kernel is not properly adding guard or gap-pages below the stack. CVE-2010-2240 - The fbComposit...

Nmap NSE: Citrix Enum Servers XML

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: Citrix Enum Servers

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE: Citrix Enum Servers

This script attempts to extract a list of Citrix servers from the ICA Browser service. This is a wrapper on the Nmap Security Scanner's http://nmap.org citrix-enum-servers.nse. OpenVAS Vulnerability Test $Id: gbnmapcitrixenumservers.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Citrix...

PCA hack CBI Through The Creation Of Proxy Server from Other Three Countries !!

The research on hacking the website of the IWC by the Pakistan Army Cyber PCA revealed that Islamabad were able to overcome the first line by creating proxy servers. CBI has traced these servers in Pakistan, United States California, Indonesia Jakarta and Latvia. CBI source said, "the IP addresse...

Objectivity/DB Lack of Authentication Remote Exploit

Exploit for windows platform in category dos / poc !/usr/bin/python obj.py Objectivity/DB Lack of Authentication Remote Exploit Jeremy Brown 0xjbrown41-gmail-com Jan 2011 "Objectivity, Inc. is a leader in distributed, scalable database technology. Our patented data management engine and persisten...

White House E-Card Scam Part of Larger Zeus-Related Attack

The simplistic spam campaign that hit around Christmas and purported to be a holiday greeting from the White House not only included a piece of Zeus-related malware that searches hard drives for documents and uploads them to a remote server, but also appears to be connected to a similar attack fr...