RHEL 7 : libvirt (RHSA-2015:0323)

Updated libvirt packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Low security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

DNS Enumeration Script: DNSRecon

DNS reconnaissance is part of the information gathering stage on a penetration test engagement. When a penetration tester is performing a DNS reconnaissance he is trying to obtain as much information as he can regarding the DNS servers and their records. The information that can be gathered can...

kernel security, bug fix, and enhancement update

2.6.32-431.23.3 - netdrv pppol2tp: fail when socket option level is not SOLPPPOL2TP 1119461 1119462 CVE-2014-4943 2.6.32-431.23.2 - kernel utrace: force IRET path after utracefinishvfork Oleg Nesterov 1115932 1115933 CVE-2014-4699 2.6.32-431.23.1 - net iptunnel: fix iptunnelfind to return NULL in...

Vulnerability in Viber Allows Snooping of Images, Videos

UPDATE – Viber, a messaging and VoIP application similar to WhatsApp, is in the middle of patching a vulnerability that could allow an attacker to view sensitive information shared between users like images, videos and location information. The problem is that information transferred by Viber is...

CVE-2012-3062

Cisco IOS before 15.11SY, when Multicast Listener Discovery MLD snooping is enabled, allows remote attackers to cause a denial of service CPU consumption or device crash via MLD packets on a network that contains many IPv6 hosts, aka Bug ID CSCtr88193...

Design/Logic Flaw

Cisco IOS before 15.11SY, when Multicast Listener Discovery MLD snooping is enabled, allows remote attackers to cause a denial of service CPU consumption or device crash via MLD packets on a network that contains many IPv6 hosts, aka Bug ID CSCtr88193...

CVE-2012-3062

Cisco IOS before 15.1(1)SY is affected by CVE-2012-3062. When Multicast Listener Discovery (MLD) snooping is enabled, remote attackers can cause denial of service (CPU consumption or device crash) by sending MLD packets in networks with many IPv6 hosts. This entry provides the vulnerability descr...

CVE-2012-3062: Improper Input Validation

Cisco IOS before 15.11SY, when Multicast Listener Discovery MLD snooping is enabled, allows remote attackers to cause a denial of service CPU consumption or device crash via MLD packets on a network that contains many IPv6 hosts, aka Bug ID CSCtr88193...

FreeBSD : OpenSSL -- Local Information Disclosure (7ccd4def-c1be-11e3-9d09-000c2980a9f3)

OpenSSL reports : A flaw in the implementation of Montgomery Ladder Approach would create a side-channel that leaks sensitive timing information. A local attacker might be able to snoop a signing process and might recover the signing key from it. %NASLMINLEVEL 70300 C Tenable Network Security, In...

CVE-2014-0705

The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...

CVE-2014-0705

The CVE-2014-0705 issue affects Cisco Wireless LAN Controllers (WLC) where the MLDv2 Snooping feature, when handling malformed IPv6 MLDv2 packets, can trigger a denial of service (device restart). Affected IOS/WLC versions are 7.2, 7.3, 7.4 prior to 7.4.121.0, and 7.5. Cisco released a security a...

CVE-2014-0704: Undefined Security Weakness

The IGMP implementation on Cisco Wireless LAN Controller WLC devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service memory over-read and device restart via a crafted field in an IGMPv3 message, aka Bug ...

CVE-2014-0705: Undefined Security Weakness

The multicast listener discovery MLD service on Cisco Wireless LAN Controller WLC devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service device restart via a malformed IPv6 MLDv2 packet, aka Bug ID CSCuh74233...

PT-2014-1306

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 7.2, 7.3, 7.4 through 7.4.120.0, and 7.5 Description The issue allows remote attackers to cause a denial of service, resulting in a device restart, by sending a malformed IPv6 MLDv2 packet when MLDv2...

PT-2014-1325

Name of the Vulnerable Software and Affected Versions Cisco Wireless LAN Controller versions 4.x through 7.3, except version 7.0.250.0 and later Description The issue is related to the implementation of IGMP for Cisco Wireless LAN Controller devices when IGMPv3 Snooping is enabled. It allows remo...

France Government used Rogue Google SSL Digital Certificates to Spy on users

Google has found that the French government agency using unauthorized digital certificates for some of its own domains to perform man-in-the-middle attacks on a private network. Google security engineer Adam Langley described the incident as a "Serious Security breach", which was discovered in...

DEBIAN-CVE-2013-2481

Integer signedness error in the dissectmountdirpathcall function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfsfilenamesnooping is enabled, allows remote attackers to cause a denial of service application crash via a...

UBUNTU-CVE-2013-2481

Integer signedness error in the dissectmountdirpathcall function in epan/dissectors/packet-mount.c in the Mount dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6, when nfsfilenamesnooping is enabled, allows remote attackers to cause a denial of service application crash via a...

PT-2013-3814

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.13 Wireshark versions 1.8.x through 1.8.5 Description The issue is related to an integer signedness error in the dissect mount dirpath call function in the Mount dissector. When nfs file name snooping is...

CVE-2013-1141

The mDNS snooping functionality on Cisco Wireless LAN Controller WLC devices with software 7.4.1.54 and earlier does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload via crafted mDNS packets, aka Bug ID CSCue04153...