Cisco IOS Software IPS and Zone Based Firewall Vulnerabilities

Cisco IOS Software contains two vulnerabilities related to Cisco IOS Intrusion Prevention System IPS and Cisco IOS Zone-Based Firewall features. These vulnerabilities are: Memory leak in Cisco IOS Software Cisco IOS Software Denial of Service when processing specially crafted HTTP packets Cisco h...

Cisco IOS Software Data-Link Switching Vulnerability

Cisco IOS Software contains a memory leak vulnerability in the Data-Link Switching DLSw feature that could result in a device reload when processing crafted IP Protocol 91 packets. Cisco has released software updates that address this vulnerability. This advisory is posted at...

Fedora 16 : firefox-6.0.2-1.fc16 / mozvoikko-1.9.0-7.fc16 / thunderbird-6.0.2-1.fc16 / etc (2011-12243)

The latest version of Firefox and Thunderbird has the following changes : - Removed trust exceptions for certificates issued by Staat der Nederlanden see bug mozbz683449 and the security advisory - Resolved an issue with gov.uk websites see bug mozbz669792 Note that Tenable Network Security has...

Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs Advisory ID: cisco-sa-20110831-tandberg Revision 1.0 For Public Release 2011 August 31 1600 UTC GMT...

Microsoft Internet Explorer Window Open Race Condition Remote Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aura...

Microsoft Internet Explorer Shift JIS Character Encoding Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to access local files or content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information that m...

Brocade BigIron RX switch ACL bypass vulnerability

Overview Brocade BigIron RX switch devices are susceptible to an access control list ACL bypass vulnerability by sending packets with the source port 179. Description Brocade BigIron RX switch devices do not properly restricted packets sent with a source port of 179. Port 179 is commonly used for...

Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution

Added: 06/13/2011 CVE: CVE-2011-2039 BID: 48081 OSVDB: 72714 Background Cisco AnyConnect Secure Mobility Client provides remote mobile users with secure IPsec IKEv2 or SSL Virtual Private Network VPN connections to Cisco 5500 Series Adaptive Security Appliances ASA and devices that are running...

Cisco AnyConnect Secure Mobility Client VPNWeb ActiveX Code Execution

Added: 06/13/2011 CVE: CVE-2011-2039 BID: 48081 OSVDB: 72714 Background Cisco AnyConnect Secure Mobility Client provides remote mobile users with secure IPsec IKEv2 or SSL Virtual Private Network VPN connections to Cisco 5500 Series Adaptive Security Appliances ASA and devices that are running...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series Advisory ID: cisco-sa-20110601-phone Revision 1.0 For Public Release 2011 June 1 1600 UTC GMT +----------------------------------------------------------------...

Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Server Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco Content Delivery System Internet Streamer: Web Server Vulnerability Advisory ID: cisco-sa-20110525-spcdn Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities Advisory ID: cisco-sa-20110525-rvs4000 Revision 1.0 For Public Release 2011 May 25 1600 UTC GMT...

Cisco Unified Operations Manager Common Services Device Center Cross-Site Scripting Vulnerability

Cisco Unified Operations Manager contains a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to improper validation of user input supplied to the Common Services Device Center component used b...

FCC Roundtable: Small Businesses Lacking Security, But We Can Help

Small businesses aren’t taking the necessary precautions to protect themselves from cyber attacks, according to the U.S. Federal Communications Commission FCC – but Uncle Sam wants to help. The U.S. Government agency, better known for battles over media deregulation, is now looking ot help small...

Former Cisco Engineer Arrested for Hacking !

Former Cisco Engineer Arrested for Hacking ! A former Cisco engineer was arrested last year on charges of hacking into his former employer's network and is currently awaiting extradition in Canada. The charges against Peter Alfred-Adekeye, a British national who worked for Cisco before leaving to...

Microsoft Excel 'RealTimeData' Record Parsing Remote Code Execution Vulnerability

Description Microsoft Excel is prone to a remote code-execution vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running the...

Microsoft Excel CVE-2011-0098 Heap Based Buffer Overflow Vulnerability

Description Microsoft Excel is prone to a heap-based buffer-overflow vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to open a specially crafted Excel file. Successful exploits can allow attackers to execute arbitrary code with the privileges of the user running t...

PT-2011-1248

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.2.154.27 Adobe AIR versions prior to 2.6.19140 Adobe Reader 9.x versions prior to 9.4.4 and 10.x versions prior to 10.0.1 on Windows, and prior to 10.0.3 on Mac OS X Adobe Acrobat 9.x versions prior to...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances Advisory ID: cisco-sa-20110223-asa Revision 1.0 For Public Release 2011 February 23 1600 UTC GMT...

Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability Advisory ID: cisco-sa-20110216-csa Revision 1.0 For Public Release 2011 February 16 1600 UTC GMT...