CVE-2012-1802

CVE-2012-1802 affects Siemens Scalance X Industrial Ethernet switches (X414-3E, X308-2M, X-300EEC, XR-300, X-300) where the embedded web server can overflow the buffer via a malformed URL. Root cause: improper URL sanitization leading to a memory overflow (CWE-119). Impacts: remote denial of serv...

Switch your SIM

Rather than carrying your SIM and the data it contains, consider buying a temporary SIM once you arrive at your destination. Many airports have kiosks that sell prepaid SIM cards that are inexpensive and come with prepaid data and minutes. They’re perfect for traveling executives, won’t give an...

Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability Advisory ID: cisco-sa-20120328-smartinstall Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT...

CVE-2012-1838

CVE-2012-1838 affects the LG-Nortel ELO GS24M switch. The web management interface allows remote attackers to bypass authentication and access cleartext credentials and configuration information by directly requesting a configuration web page. This is reflected in the NVD entry (base score 5.0, C...

Enterasys SecureStack Switch crossite scripting

Stored XSS in different configuration parameters...

Oracle Exadata Infiniband Switch default logins and world readable shadow file

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Bugtraq List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both data...

Oracle Exadata Infiniband Switch security vulnerabilities

Default accounts, /conf/shadow file weak permissions...

Oracle Exadata Infiniband Switch Default Logins / Poor Configuration

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Full-Disclosure List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both da...

Enterasys SecureStack Switch 6.x Cross Site Scripting

Title: ====== Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities Date: ===== 2012-03-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=443 VL-ID: ===== 443 Introduction: ============= The Enterasys C5 is a scalable, high-performance Gigabit Ethernet switch...

Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities

Document Title: =============== Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=443 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ===================================...

Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities

Document Title: =============== Enterasys SecureStack Switch v6.x - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=443 Release Date: ============= 2012-03-07 Vulnerability Laboratory ID VL-ID: ===================================...

CVE-2012-1085

Unspecified vulnerability in the BE User Switch beuserswitch extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the BE User Switch beuserswitch extension 0.0.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1085

Unspecified vulnerability in the BE User Switch beuserswitch extension 0.0.1 for TYPO3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-1085

Technical details about CVE-2012-1085 are not provided in the supplied documents beyond a generic description of an unspecified vulnerability in the TYPO3 BE User Switch extension; monitor for updates.

CVE-2012-1084

The CVE-2012-1084 entry concerns TYPO3’s BE User Switch (beuserswitch) extension version 0.0.1, where an XSS vulnerability could allow remote attackers to inject arbitrary script or HTML via unspecified vectors. The available documents identify the affected software and vulnerability type but do ...

glucose 2 vulnerable to arbitrary script execution

Overview glucose 2 is vulnerable to arbitrary script execution. glucose 2 is an RSS reader. glucose 2 is vulnerable to arbitrary script execution which is inserted in RSS feed, due to the improper processing of RSS feed output. Daiki Fukumori of Cyber Defense Institute, Inc. reported this...

Siemens Scalance X Buffer Overflow Vulnerability

Overview ICS-CERT has received a report from Siemens regarding a buffer overflow vulnerability in the web interface of the Scalance X Industrial Ethernet switch. This vulnerability was reported to Siemens by Jürgen Bilberger from Daimler TSS GmbH. This vulnerability leaves the affected devices...

HP Facing Class Action Suit For Not Disclosing Printer Vulnerability

A class action lawsuit filed in U.S. District Court in California against Hewlett-Packard could have wide ranging implications for software makers, should the court agree with the plaintiff’s claim that the company violated the state’s consumer protection laws by failing to disclose a serious...

RIM Exec Says Blackberry Service Wasn't Hacked…Really!

Research in Motion CTO David Yach said that the rolling service outages that its Blackberry mobile phone system has experienced in the last few days wasn’t due to a security compromise, but to an unsuccessful fail over following a core switch failure in Europe. “I know there’s often speculation i...