Dark Reading
Risky Business
Do more than just cursory scans. Develop
a holistic approach to app security.
Find out how!
Learn to take the ambiguity out of managing IT so you can guide your business forward.
Download now!
Use these tips from Gartner to identify the EPP solution that best suits your business.
Download now!
Most Recent | 1 | 2 | 3 | 4 | 5 | 6
Around The Web
IP WORLD
U.S. ISPs Begin Warning Internet Users Against Piracy
Warning letters will go to users accused of downloading music illegally
ICANN
ICANN Continues Collaborative Response To Conficker Worm
Service providers, DNS community join researchers in effort to slow growing threat
LAW.COM
Email Theft Case Sparks First-Of-A-Kind Ruling
Court takes new position after employer steals messages from employee's personal AOL account
SYDNEY MORNING HERALD
Australian ISP Stands Up For BitTorrent Users
Australian iiNet refuses to admit that any of its users are illegally downloading content
SMALL CAP NEWS UK
Telecom Companies Urged To Review Risks
Privacy and security issues rank ninth on list of top 10 risks for service providers
DNA INDIA
Indian Telcos Face Regulatory Risks
Privacy and security concerns are among factors that could slow telecom growth
VNUnet
Police Use Social Networks To Monitor G20 Protestors
London law enforcement agencies look for warning signs on Facebook, MySpace
SECURITY FOCUS
Act Locally, Pwn Globally
Expert calls for international effort to mandate verification of registration information for Internet services and products
Around the Web Archive:
Most Recent | 1 | 2 | 3 | 4 | 5 | 6
One In Four Children Have Tried Hacking, Study Says
Report: Phishing Hits All-Time High
Forrester: Managed Security Services Poised To Take Off
MORE KEYHOLE
Published:2010-03-05
Severity:High
Description:Multiple buffer overflows in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3, allow remote attackers to execute arbitrary code via a crafted parameter size.
Published:2010-03-05
Severity:High
Description:Integer signedness error in the authentication functionality in librpc.dll in the Informix Storage Manager (ISM) Portmapper service (aka portmap.exe), as used in IBM Informix Dynamic Server (IDS) 10.x before 10.00.TC9 and 11.x before 11.10.TC3 and EMC Legato NetWorker, allows remote attackers to execute arbitrary code via a crafted parameter size that triggers a stack-based buffer overflow.
Published:2010-03-05
Severity:Medium
Description:The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.
Published:2010-03-05
Severity:Medium
Description:The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch.
Published:2010-03-05
Severity:High
Description:Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x before 4.3(2)SR2, 6.x before 6.1(5), 7.x before 7.1(3a)su1, and 8.x before 8.0(1) allows remote attackers to cause a denial of service (process failure) via a malformed SCCP StationCapabilitiesRes message with an invalid MaxCap field, aka Bug ID CSCtc38985.
|
