138 matches found
Oracle Solaris Third-Party Patch Update : perl-58 (cve_2012_5195_buffer_errors)
The remote Solaris system is missing necessary patches to address security updates : - Heap-based buffer overflow in the Perlrepeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service...
Oracle Solaris Third-Party Patch Update : horizon (multiple_cross_site_scripting_xss1)
The remote Solaris system is missing necessary patches to address security updates. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Oracle Third Party software advisories. include'deprecatednasllevel.inc';...
Oracle Solaris Third-Party Patch Update : py_pil (cve_2014_3589_input_validation)
The remote Solaris system is missing necessary patches to address security updates : - PIL/IcnsImagePlugin.py in Python Imaging Library PIL and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size. CVE-2014-3589 %NASLMINLEVEL 703...
Security Advisory-Bash Code Injection Vulnerability
This security advisory SA describes the impact of 6 Bash vulnerabilities discovered in third-party software Vulnerability ID: HWPSIRT-2014-0951. 1.OS Command Injections vulnerability CVE-2014-6271. GNU Bash through 4.3 processes trailing strings after function definitions in the values of...
[CORE-2014-0005] - Advantech WebAccess Vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Advantech WebAccess Vulnerabilities 1. Advisory Information Title: Advantech WebAccess Vulnerabilities Advisory ID: CORE-2014-0005 Advisory URL: http://www.coresecurity.com/advisories/advantech-webaccess-vulnerabilities Date...
Security Advisory-9 OpenSSL vulnerabilities on Huawei products
This security advisory SA describes the impact of 9 OpenSSL vulnerabilities discovered in third-party software. Vulnerability ID: HWPSIRT-2014-0816 These vulnerabilities are referenced in this document as follows: 1.Information leak in pretty printing functions CVE-2014-3508. A flaw in OBJobj2txt...
Advantech WebAccess Vulnerabilities
Advisory ID Internal CORE-2014-0005 1. Advisory Information Title: Advantech WebAccess Vulnerabilities Advisory ID: CORE-2014-0005 Advisory URL:http://www.coresecurity.com/advisories/advantech-webaccess-vulnerabilities Date published: 2014-09-02 Date of last update: 2014-09-01 Vendors contacted:...
Windows Server IoT/Windows Storage Server — Support Statement
Support Statement At Veeam, we understand that some customers may have hardware that comes pre-installed with Windows Server IoT or Windows Storage Server, and they may want to use these to fill the role of Veeam-product component servers. While Windows Server IoT and Windows Storage Server are...
PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability
Document Title: =============== PayPal GoToMaxx PDFMailer - Local Overflow Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1274 http://www.vulnerability-lab.com/getcontent.php?id=940 Video: https://www.youtube.com/watch?v=IXhwfZV6x0M Release Date:...
6 Tips to Save Time Doing Patch Management
If you spend more than a few hours a month doing patching; if you stay up until the middle of the night one Saturday each month doing patching; if you just flip on automatic updates and hope for the best; or if you email your users instructions on how to update their machines – then you’re doing ...
Adobe Flash Player sandbox for Safari OS X Mavericks
Mac OS X Mavericks may have brought with it iBooks and Maps to the Apple desktop operating system, but for security conscious users, perhaps the thing most worth noting is the addition of sandbox protection for Adobe Flash Player for the Safari browser, announced yesterday by Adobe. “By providing...
Prevent Veeam from locking tape drives
Challenge Veeam periodically rescans the tape drives. This locks the drives and prevents other tape software from writing to them. Cause The refresh rate on the automatic rescan is too frequent if using third party tape backup software. Solution The registry keys below prevent Veeam Backup &...
Drupal resets 1 Million Passwords after Data Breach
A Drupal data breach was announced by the official Drupal Association, that Passwords for almost one million accounts on the Drupal.org website are being reset after hackers gained unauthorized access to sensitive user data. The security of the open source content management system has been...
Drupal resets 1 Million Passwords after Data Breach
A Drupal data breach was announced by the official Drupal Association, that Passwords for almost one million accounts on the Drupal.org website are being reset after hackers gained unauthorized access to sensitive user data. The security of the open source content management system has been...
Drupal.org Resets Passwords After Data Breach
The Drupal Association is urging all users of Drupal.org and groups.drupal.org to reset their passwords after discovering an intrusion that breached files holding usernames, e-mail addresses, countries and hashed passwords. Sites that run on Drupal do not appear to be impacted, though the...
Error “Unexpected VHD Feature Mask ‘6’” on Hyper-V backup or replication job
Challenge The feature mask 6 error is Hyper-V specific. This KB covers that error and how to resolve it. Cause Feature mask 6 errors most often occur when a Hyper-V VM was a Physical to Virtual conversion using third party software. The issue is that some third party converter software creates th...
FreeBSD Servers Compromised; Third-Party Software Packages Could be Impacted
FreeBSD is warning users of the open source UNIX-like operating system about a compromise of a pair of servers used to build third-party software. The organization said attackers had sufficient access to affect third-party packages distributed by the project and suggests that any software install...
DarkBot Malware Circulation very fast via Skype
Two weeks back we reported that Security firm Trend Micro discovered a worm targeting Skype users with spam messages designed to infect machines with the Dorkbot ransomware has been discovered. This malware is spreading through a question/ phrase sent to the users by someone and the question is:...
Checkpoint Abra - Vulnerabilities
Check Point Abra Vulnerabilities Vendor: Check Point Software Technologies Ltd Product web page: http://rus.checkpoint.com/products/abra/index.html; http://www.checkpoint.com/products/go/ Platforms: Windows XP, Vista, 7 32 bit Authors: Belov V., Komarov A. Group-IB Summary: Check Point Abra allow...
Checkpoint Abra - Multiple Vulnerabilities
Check Point Abra Vulnerabilities Author: Belov V., Komarov A. Group-IB, http://group-ib.ru Vendor: Check Point Software Technologies Ltd Product web page: http://rus.checkpoint.com/products/abra/index.html; http://www.checkpoint.com/products/go/ Platforms: Windows XP, Vista, 7 32 bit Summary: Che...