Re: CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials

FYI, we have published a fix for this issue. https://support.ca.com/irj/portal/anonymous/solndtls?aparNo=RO33517&os=W INDOWS&actionID=3 A formal security notice will be published next week. Thanks and regards, Ken Williams, Director CA Technologies Product Vulnerability Response Team CA...

Avant-Garde Technologies (display-section.php?id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Avant-Garde Technologies display-section.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.agtsindia.com/ Persian Gulf 4 Ever! Dork : "Powered by Avant-Garde...

Avant-Garde Technologies SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Avant-Garde Technologies display-section.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.agtsindia.com/ Persian Gulf 4 Ever! Dork : "Powered by Avant-Garde...

CentOS Update for pidgin CESA-2009:1218 centos3 i386

Check for the Version of pidgin OpenVAS Vulnerability Test CentOS Update for pidgin CESA-2009:1218 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CentOS Update for pidgin CESA-2009:1218 centos3 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for finch CESA-2009:1218 centos5 i386

Check for the Version of finch OpenVAS Vulnerability Test CentOS Update for finch CESA-2009:1218 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

CiscoKits 1.0 - TFTP Server Directory Traversal

CiscoKits 1.0 - TFTP Server Directory Traversal !/usr/bin/python Title : CiscoKits TFTP Server Directory Traversal Vulnerability Author : Antu Sanadi from SecPod Technologies www.secpod.com Vendor : http://www.certificationkits.com/cisco-ccna-tftp-server/ Advisory : http://secpod.org/blog/?p=301...

CiscoKits 1.0 - TFTP Server Write Command Denial of Service

CiscoKits 1.0 - TFTP Server Write Command Denial of Service !/usr/bin/python Title : CiscoKits CCNA TFTP Server Denial Of Service Vulnerability Author : Prabhu S Angadi from SecPod Technologies www.secpod.com Vendor : http://www.certificationkits.com/cisco-ccna-tftp-server/ Advisory :...

Freefloat FTP Server 1.0 Buffer Overflow

Freefloat FTP Server POST Auth Multiple Commands Buffer Overflow Vulnerabilities SecPod Technologies www.secpod.com Author: Veerendra G.G SecPod ID: 1019 19/07/2011 Issue Discovered 19/07/2011 Vendor Notified No Response From Vendor 04/08/2011 Advisory Released Class: Buffer Overflow Severity: Hi...

Microsoft BlueHat Security contest - Mega Prize $250,000

Microsoft BlueHat Security contest - Mega Prize $250,000 Microsoft today launched a $250,000 contest for researchers who develop defensive security technologies that deal with entire classes of exploits. The total cash awards for Microsoft's "BlueHat Prize " contest easily dwarfs any bug bounty...

Incident Response and Recovery May Be the Best Defense

By B.K. DeLong The ever increasing list of breaches appearing on the Open Security Foundation’s DataLossDB Web site as well as companies being targeted by the AntiSec movement made up of groups including recently-raided Anonymous, AnonOps, TeaMp0isoN, and now-dormant LulzSec continues to show tha...

CVE-2011-2959

Stack-based buffer overflow in the Open Database Connectivity ODBC service Odbcixv9se.exe in 7-Technologies Interactive Graphical SCADA System IGSS 9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet to TCP port 22202...

CVE-2011-2959

The CVE-2011-2959 entry concerns a stack-based buffer overflow in the ODBC service (Odbcixv9se.exe) of 7-Technologies IGSS (Interactive Graphical SCADA System) versions 9 and earlier. A remote attacker can send a crafted packet to TCP port 22202 to trigger a denial of service and, as implied by m...

PT-2011-4209

Name of the Vulnerable Software and Affected Versions 7-Technologies Interactive Graphical SCADA System IGSS versions 9 and earlier Description The issue is related to a stack-based buffer overflow in the Open Database Connectivity ODBC service, which can be exploited by sending a crafted packet ...

CVE-2011-2959: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the Open Database Connectivity ODBC service Odbcixv9se.exe in 7-Technologies Interactive Graphical SCADA System IGSS 9 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet to TCP port 22202...

[PT-2011-08] Multiple vulnerabilities in Dlink DPH 150SE/E/F1

---------------------------------------------------------------------- PT-2011-08 Positive Technologies Security Advisory Multiple vulnerabilities in Dlink DPH 150SE/E/F1 ---------------------------------------------------------------------- --- Vulnerable platform Dlink DPH 150s IP Phone Firmwar...

Elitecore Cyberoam UTM Cross Site Scripting

Elitecore Cyberoam UTM - Authenticated Cross-Site Scripting Vulnerability http://www.osisecurity.com.au/advisories/cyberoam-authenticated-cross-site-scripting Release Date: 20-Jul-2011 Software: Elitecore Technologies - Cyberoam http://www.cyberoam.com/ "Cyberoam Unified Threat Management...

PT-2011-25: SQL injection vulnerabilities in Support Incident Tracker

Positive Research Center has discovered multiply SQL injection vulnerabilities in Support Incident Tracker. Application incorrectly validates input data, which allows attackers to conduct an SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database...

PT-2011-24: Security Restrictions Bypassing in Arbor Peakflow X

The specialists of the Positive Research center have detected a Security Restrictions Bypassing vulnerability in Arbor Peakflow X. Any user registered in the system can perform the following actions: - Lock any system users with any privileges except the user "admin." - Unlock any locked system...

PT-2011-23: Database information disclosure in GLPI

Positive Research Center has discovered a database information disclosure vulnerability in GLPI. The vulnerability can be exploited with a minimally privileged user account such as "post-only." The vulnerable script is /ajax/autocompletion.php. An authorized user can send a special request to thi...