The Hacker News arrived on Google+ Pages

The Hacker News arrived on Google+ Pages Google has finally added Google+ Pages feature in their social network which allow brands, products, companies, businesses, places, groups, and everyone else to establish a presence on the service. We've gone ahead and set up our very own 'The Hacker News'...

The Hacker News arrived on Google+ Pages

The Hacker News arrived on Google+ Pages Google has finally added Google+ Pages feature in their social network which allow brands, products, companies, businesses, places, groups, and everyone else to establish a presence on the service. We've gone ahead and set up our very own 'The Hacker News'...

Cisco Show and Share security vulnerabilities

Authentication bypass, code execution...

Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Show and Share Security Vulnerabilities Advisory ID: cisco-sa-20111019-sns Revision 1.0 For Public Release 2011 October 19 16:00 UTC GMT +--------------------------------------------------------------------- Summary...

kernel: cifs session reuse

The cifsfindsmbses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user...

Design/Logic Flaw

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

Code injection

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2585

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

CVE-2011-2584

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2584

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

CVE-2011-2585

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

CVE-2011-2584

Cisco Show and Share versions 5.2(1) and 5.2(2) prior to 5.2(2.1) are affected by CVE-2011-2584, which allows anonymous users to access several administrative pages (Encoders/Pull Configs, Push Configs, Video Encoding Formats, Transcoding) and potentially cause a live-event DoS or disclosure of i...

CVE-2011-2585

Cisco Show and Share (5.2(2) and earlier) is vulnerable to CVE-2011-2585 where an authenticated user with video-upload privileges can upload code that executes with the web server’s non-root privileges. Cisco’s advisory (CSCto69857) states the fix is in 5.2(2.1) or later; upgrade to a release equ...

PT-2011-3938

Name of the Vulnerable Software and Affected Versions Cisco Show and Share versions 52, 5.21, and 5.22 before 5.22.1 Description The issue allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges. Recommendations For versions 52, 5.21, and 5.22...

CVE-2011-2585: Improper Control of Generation of Code

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote authenticated users to upload and execute arbitrary code by leveraging video upload privileges, aka Bug ID CSCto69857...

CVE-2011-2584: Undefined Security Weakness

Cisco Show and Share 52, 5.21, and 5.22 before 5.22.1 allows remote attackers to access the 1 Encoders and Pull Configurations, 2 Push Configurations, 3 Video Encoding Formats, and 4 Transcoding administration pages, and cause a denial of service live event outage or obtain potentially sensitive...

PT-2011-3937

Name of the Vulnerable Software and Affected Versions Cisco Show and Share versions 52, 5.21, and 5.22 before 5.22.1 Description The issue allows remote attackers to access administration pages, including Encoders and Pull Configurations, Push Configurations, Video Encoding Formats, and...

Cisco Show and Share File Upload Arbitrary Code Execution Vulnerability

Cisco Show and Share contains a vulnerability that could allow an authenticated, remote attacker to execute code on a vulnerable device. The vulnerability is due to insecure restrictions when allowing videos to be uploaded to an affected device. An authenticated, remote attacker with privileges t...

Cisco Show and Share Security Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Releases Two Security Advisories

Cisco has released two security advisories to address vulnerabilities affecting CiscoWorks Common Services and Cisco Show and Share. These vulnerabilities may allow an attacker to execute arbitrary code or bypass security restrictions. US-CERT encourages users and administrators to review Cisco...