Dark Reading
Protect The Business - Enable Access
CISO GUIDE: FISMA Compliance
Do more than just cursory scans. Develop
a holistic approach to app security.
Find out how!
Do more than just cursory scans. Develop
a holistic approach to app security.
Find out how!
EBOOK: 7 Truths of IT Governance
Learn to take the ambiguity out of managing IT so you can guide your business forward.
Download now!
Learn to take the ambiguity out of managing IT so you can guide your business forward.
Download now!
BUYERS GUIDE: Endpoint Protection
Use these tips from Gartner to identify the EPP solution that best suits your business.
Download now!
Use these tips from Gartner to identify the EPP solution that best suits your business.
Download now!
All NAC Stories
ForeScout Extends NAC-As-A-Service Into The MSP Community
ForeScout also announced achieving MSPAlliance Vendor Accreditation
ForeScout Extends Technology Alliance With McAfee
Companies will integrate ForeScout CounterACT with McAfee ePO
ForeScout Teams With HP ArcSight To Deliver Real-Time Visibility And Remediation
Teaming connects ForeScout NAC platform to HP ArcSight ESM product
Avenda Systems Gives Organizations The Ability To Deploy Large-Scale Network Access Security
New eTIPS 4.0 release extends centrally managed network access visibility, and context-aware policy management capabilities
Barrier1 Introduces Clientless NAC
Complete NAC brings in line real-time inspection and protection beyond the client component
ForeScout Offers Network Access Control Competitive Trade-In
Customers of Cisco, Juniper, Bradford, Symantec, and other NAC products can move up to ForeScout at an attractive discount
Nominum Announces IPv6 Readiness Program For Network Operators
IPv6 Readiness Program provides network operators with access to Nominum’s IPv6 compliant Vantio Intelligent DNS System and ANS Premier solutions
More Than 73% Of Network Devices Contain At Least One Known Vulnerability
Dimension Data releases Network Barometer Report 2011
Sourcefire Total Revenues Increase In First Quarter Of 2011
Highlights include a 19 percent increase in total year-over-year revenue
APCON Rolls Out Switches With Filtering Options
Unveils latest packet aggregation switching solutions at RSA
Avenda Systems Adds Visibility And Intelligence To Next-Generation Network Access Control
New correlation capabilities help organizations to track users and their devices on the network in real-time and on a historical basis
Astaro Offers Wireless Security
Astaro Wireless Security includes a subscription that turns the Astaro Security Gateway into a wireless controller
Avenda Systems Announces New Security Enhancements For Endpoint Control
Avenda OnGuard is a new family of network access agents
Xceedium Drives Expansion With $7.5 Million Series B Financing
New funds will be used to drive Xceedium’s sales and marketing expansion
McAfee, Crossbeam Partner
New security solution combines McAfee Firewall Enterprise with Crossbeam’s latest X-Series family of network security platforms
Two Ways For SMBs To Secure Their Home Workers
Clean virtual private networks or terminal services can help SMBs secure computers of home workers
Avenda Systems To Preview New Access Security Solutions
New features provide campuswide network notifications, proactive management
Codenomicon Tools For High Speed Fuzzing
Vendor releases whitepaper reporting the findings of its performance test study
Impulse Point Announces SafeConnect 5.0
Safe.Connect 5.0 includes improved real-time policy reporting dashboard interface
Network-1 Reports Second Quarter 2010 Results
Network-1 had revenues of $174,000 and $292,000 for the three and six months ended June 30, 2010
Tektronix To Acquire Arbor Networks
Acquisition is expected to close in September
Ruckus Wireless and Bradford Networks Collaborate On Smarter NAC For Enterprises
Solution lets enterprise customers better protect their wireless LANs
Solear Donates Network Forensics Appliances To Colleges, Universities, Training Organizations
Company donates network forensics appliances to cyberdefense training programs
SonicWALL Introduces Modular UTM Firewall
NSA 2400MX designed with high-port density and dual expansion module slots
Fluke Networks Announces AirCheck Wi-Fi Tester
Rugged, portable Wi-Fi tester for 802.11 a/b/g/n networks provides fast and simple WLAN visibility
Crossbeam Names New CEO
Michael Ruffolo brings more than 25 years of experience in global sales and marketing, professional services, operations, and IT management
Net Optics Unveils New Director Pro And Gig Zero Delay Solutions
Solutions ensure 100 percent network visibility to improve network and application performance
Black Box To Demonstrate Security Solutions At RSA
Products family of Veri-NAC network access control appliances
PFU Systems Debuts Affordable Network Access Control Solution
iNetSec Inspection Center V6.0 for VMware keeps networks secure from external threats and internal breaches
McAfee, Brocade Team Up In Network Security
Brocade will work in conjunction with McAfee to integrate critical security capabilities into the Brocade family of networking products
Trustwave NAC Achieves Common Criteria Validation
Trustwave has been validated for Common Criteria Evaluation Assurance Level (EAL) 2 Augmented with Flaw Remediation (ALC FLR. 1) or EAL 2+
InfoExpress Adds Virtual Appliance To Its CyberGatekeeper Family Of NAC Products
CyberGatekeeper virtual NAC policy server establishes what policies need to be enforced based on endpoint assessment, connection method and behavior of the device
Fortinet Announces Breakthrough In IPv6 Security Throughput
BreakingPoint Elite used to validate IPv6 performance on FortiGate-5140 multi-threat system
Black Box Rolls Out New NAC
Veri-NAC only lets authorized computers and devices onto a defined network
InfoExpress Enhances CyberGatekeeper 7 NAC Products
Product family now offers support for Windows 7 and custom reports
Vulnerability Management: The Missing Link In Mobile Device Security
Enterprises, vendors struggle to find methods for detecting security flaws in increasingly-popular portable gadgets
Trustwave Receives NAC Patent
Latest patent enables the detection and management of endpoints connected to wireless access points
Avenda Systems, Great Bay Software Partner In Network Endpoint Discovery
Standards-based enterprise discovery model ensures network-attached devices are accounted for prior to policy enforcement
APconnections Announces Availability Of Radius Authentication
NetEqualizer is a plug-and-play bandwidth control and WAN/Internet optimization appliance
Neurotechnology's VeriEye 2.1 Ranks High In Reliability By NIST Iris Exchange (IREX) Evaluation
Neurotechnology had the fastest overall iris matching algorithm - 25 to 75 times faster than other top ranked competitors
TrustPort Unveils New Version Of Net Gateway
TrustPort Net Gateway now includes more effective spam detection, support for domain signing technologies, and filtering spam in different languages
White Paper: How To Secure Privileged Identities
Lieberman Software provides practical tips, including manual processes as well as automated alternatives, for securing and managing the privileged account credentials that grant access to IT resources
Cisco Rolls Out Small Business Security Solutions
In addition, Cisco announces new partner profitability programs to help its channel partners grow a profitable and sustainable small business practice
Great Bay Software Launches Beacon 3.1
Solution features identity-based endpoint discovery, monitoring, and provisioning, while also addressing growing challenges in the security and operations of 802.1X and NAC-enabled environments
Extreme Networks, eTelemetry Partner To Offer NAC Alternative
Extreme Networks customers now have access to asset management capabilities within eTelemetry's flagship network appliance, Locate
StillSecure, Force10 Networks Extend Partnership In Convergence Of Network Devices And Security
Companies will enable 802.1x-based network access control (NAC) on all Force10 Ethernet switches
Sourcefire, Bradford Networks Partner On Network Security, Remediation
Companies have integrated the Sourcefire 3D System with Bradford Networks' Campus Manager and NAC Director for automated remediation against potential attacks, vulnerabilities, or policy violations
Sourcefire Announces 2009 Second Quarter Results
Revenue increases 38 percent year-over-year
Research: LAN Sprawl Leaves Network Controls At Risk
Because of "LAN sprawl," the majority of IT decision-makers surveyed acknowledge a need to improve security in their environments
Trapeze Networks Awarded Two Wireless Networking Patents
Patents involve location-based access control, identity-based networking
Tech Centers
Mobile Malware On The Move, McAfee Report Says
Strategies For Fighting Mobile Device-Borne Malware
Most Small Healthcare Practices Hacked In The Past 12 Months
MORE KEYHOLE
ENTERPRISE VULNERABILITIES
Vulnerability:ssl-vpn end-point interrogator/installer activex control
Published:2010-11-03
Severity:High
Description:Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.
Published:2010-11-03
Severity:High
Description:Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.
Vulnerability:gvim
Published:2010-11-03
Severity:High
Description:Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.
Published:2010-11-03
Severity:High
Description:Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in the same folder as a .TXT file. NOTE: some of these details are obtained from third party information.
Vulnerability:cforms
Published:2010-11-03
Severity:Medium
Description:Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.
Published:2010-11-03
Severity:Medium
Description:Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.
Vulnerability:links, wsn links, wsn links
Published:2010-11-03
Severity:High
Description:Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
Published:2010-11-03
Severity:High
Description:Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.
Vulnerability:deluxebb
Published:2010-11-03
Severity:Medium
Description:SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.
Published:2010-11-03
Severity:Medium
Description:SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.
|
