Threat Outbreak Alert RuleID17237: Email Messages Distributing Malicious Software on August 10, 2015

Medium Alert ID: 40362 First Published: 2015 August 10 14:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17237 may contain the following files: Name |...

hivex: missing checks for small-sized files

It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could...

DEBIAN-CVE-2015-3258

Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a small line size in a print job...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The kernel-build-2.4.27-powerpc-small package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

Multiple vulnerabilities exist in the kernel-image-2.4.27-powerpc-small operating system of the Debian GNU/Linux distribution. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Cisco small business phone the firmware of the exposed high-risk vulnerabilities attackers can listen to private phone calls-vulnerability warning-the black bar safety net

The vulnerabilityCVE-2 0 1 5-0 6 7 0in the presence of is actually because some Cisco IP Phone default configuration contains a number of inappropriate settings. It allows an attacker to the affected device sends a special XML request to control the device. In addition, the vulnerability can be...

Cisco IP Phone exposed high-risk vulnerabilities can cause remote eavesdropping-vulnerability warning-the black bar safety net

Cisco small business phone the firmware of the exposed high-risk vulnerability, the attacker can the exploit monitor private telephone calls and remote dial telephone, and that a series of malicious acts does not require any authentication. Remote monitoring and makethe words The vulnerability,...

Cisco Small Business IP Phones Open to Remote Eavesdropping

Cisco is warning customers about several vulnerabilities in some of its IP phones that can allow an attacker to listen in on users’ conversations. The bug affects the Cisco SPA 300 and 500 Series IP phones. Cisco had confirmed the vulnerabilities, which were discovered by Chris Watts, a researche...

Cisco IP Phones Vulnerable To Remote Eavesdropping

A critical vulnerability in the firmware of Cisco small business phones lets an unauthenticated attacker to remotely eavesdrop on private conversation and make phone calls from vulnerable devices without needing to authenticate, Cisco warned. LISTEN AND MAKE PHONE CALLS REMOTELY The vulnerability...

Default configuration

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...

CVE-2015-0670

The default configuration of Cisco Small Business IP phones SPA 300 7.5.5 and SPA 500 7.5.5 does not properly support authentication, which allows remote attackers to read audio-stream data or originate telephone calls via a crafted XML request, aka Bug ID CSCuo52482...

CVE-2015-0670

Cisco Small Business SPA300 and SPA500 IP phones running firmware version 7.5.5 are affected by CVE-2015-0670 due to improper authentication in the default configuration. A crafted XML request can allow an unauthenticated remote attacker to read audio-stream data or originate telephone calls. The...

Cisco Small Business SPA300 and SPA500 Series IP Phones Unauthenticated Remote Dial Vulnerability

A vulnerability in the firmware of the Cisco Small Business SPA 300 and 500 series IP phones could allow an unauthenticated, remote attacker to listen to the audio stream of an IP phone. The vulnerability is due to improper authentication settings in the default configuration. An attacker could...

Yahoo Patches Critical Small Business, eCommerce Bugs

Yahoo has fixed a handful of vulnerabilities that could have given an attacker free reign over all of its user-run eCommerce websites and caused multiple headaches for small business owners. One bug could have allowed a hacker to change item prices on a whim and given them access to sensitive...

Oracle Linux 7 : hivex (ELSA-2015-0301)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-0301 advisory. 1.3.10-5.7 - Fix: 'Argument list too long' when using virt-v2v on Windows guest with French copy of Citrix installed related: rhbz1145056 1.3.10-5.6 - Fix: typo...

CVE-2015-2063

Integer overflow in unace 1.2b allows remote attackers to cause a denial of service crash via a small file header in an ace archive, which triggers a buffer overflow...

Integer overflow

Integer overflow in unace 1.2b allows remote attackers to cause a denial of service crash via a small file header in an ace archive, which triggers a buffer overflow...

hivex: missing checks for small-sized files

It was found that hivex attempted to read, and possibly write, beyond its allocated buffer when reading a hive file with a very small size or with a truncated or improperly formatted content. An attacker able to supply a specially crafted hive file to an application using the hivex library could...

PT-2015-5576 · Winace +1 · Unace +1

Name of the Vulnerable Software and Affected Versions: unace version 1.2b Description: The issue is caused by an integer overflow in the handling of ace archives, which can lead to a denial of service crash when a small file header is encountered. This is triggered by a buffer overflow...

[SECURITY] Fedora 20 Update: maradns-2.0.11-1.fc20

MaraDNS is a package that implements the Domain Name Service DNS, an essential internet service. MaraDNS has the following advantages: Secure. Supported. Easy to use. Small. Open Source...