1542 matches found
USN-2001-1: Swift vulnerability
Peter Portante discovered that Swift did not properly handle requests with old X-Timestamp values. An authenticated attacker could exploit this to cause a denial of service via disk consumption...
Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on October 21, 2013
Medium Alert ID: 31398 First Published: 2013 October 22 20:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain money transfer details for the recipient. The text in the email message attempts to convince the recipient to...
Threat Outbreak Alert: Fake Bank Swift Payment Notification Email Messages on October 8, 2013
Medium Alert ID: 31182 First Published: 2013 October 9 15:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain bank payment information for the recipient. The text in the email message attempts to convince the recipient t...
Threat Outbreak Alert: Fake Swift Transaction Notification Email Messages on October 3, 2013
Medium Alert ID: 31118 First Published: 2013 October 4 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a swift transaction notification for the recipient. The text in the email message attempts to convince the...
NSA Intelligence Agency spies on International Credit Card Transactions including Visa
"The truth is coming, and it cannot be stopped", Edward Snowden. The National Security Agency isn't just snooping into phone and online communications. It also appears to be keeping a close eye on credit card transactions. New reports published by Der Spiegel exposed that The National Security...
NSA Intelligence Agency spies on International Credit Card Transactions including Visa
"The truth is coming, and it cannot be stopped", Edward Snowden. The National Security Agency isn’t just snooping into phone and online communications. It also appears to be keeping a close eye on credit card transactions. New reports published by Der Spiegel exposed that The National Security...
Threat Outbreak Alert: Fake Bank Deposit Notification Email Messages on September 5, 2013
Medium Alert ID: 30680 First Published: 2013 September 6 19:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit notification. The email message attempts to convince the recipient to open the attachment to...
Moderate: Red Hat Security Advisory: openstack-swift security update
Updated openstack-swift packages that fix one security issue are now available for Red Hat OpenStack 3.0. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
OpenStack: Swift Denial of Service using superfluous object tombstones
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service "superfluous" tombstone consumption and Swift cluster slowdown via a DELETE request with a timestamp that is older than expected...
OpenStack Swift 远程拒绝服务漏洞(CVE-2013-4155)
Bugtraq ID:61690 CVE ID:CVE-2013-4155 OpenStack Swift是OpenStack开源云计算项目的子项目之一,被称为对象存储,提供了强大的扩展性、冗余和持久性 OpenStack Swift存在一个安全漏洞，通过提交包含旧的X-Timestamp值的请求，通过验证的攻击者可把多余对象tombstone填充到对象服务器中，可明显减缓对该对象服务器的请求，对Swift集群进行拒绝服务攻击 0 OpenStack Swift 厂商解决方案 用户可参考如下厂商提供的安全补丁以修复该漏洞： Havana development branch fix:...
CVE-2013-2161
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name...
CVE-2013-2161
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name...
DEBIAN-CVE-2013-4155
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service "superfluous" tombstone consumption and Swift cluster slowdown via a DELETE request with a timestamp that is older than expected...
CVE-2013-4155
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service "superfluous" tombstone consumption and Swift cluster slowdown via a DELETE request with a timestamp that is older than expected...
CVE-2013-4155
OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service "superfluous" tombstone consumption and Swift cluster slowdown via a DELETE request with a timestamp that is older than expected...
DEBIAN-CVE-2013-2161
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name...
Design/Logic Flaw
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name...
CVE-2013-4155
OpenStack Swift vulnerability CVE-2013-4155 affects Swift before 1.9.1 in Folsom, Grizzly, and Havana. An authenticated user can trigger a denial of service by issuing a DELETE request with an outdated timestamp, causing superfluous tombstone consumption and Swift cluster slowdown. The primary im...
CVE-2013-2161
OpenStack Swift (Folsom, Grizzly, Havana) is affected by CVE-2013-2161 due to an XML injection in the account/utils.py path that handles account names. The root cause is unchecked/unvalidated user input in XML responses, allowing attackers to trigger invalid or spoofed Swift responses. Remediatio...
