Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-7343PUBLISHED: 2021-01-18Missing Authorization vulnerability in McAfee Agent (MA) for Windows prior to 5.7.1 allows local users to block McAfee product updates by manipulating a directory used by MA for temporary files. The product would continue to function with out-of-date detection files.
CVE-2020-28476PUBLISHED: 2021-01-18
All versions of package tornado are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configura...
CVE-2020-28473PUBLISHED: 2021-01-18
The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with defa...
CVE-2021-25173PUBLISHED: 2021-01-18An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service (crash, exit, or restart).
CVE-2021-25174PUBLISHED: 2021-01-18An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service (Crash, Exit, or Restart).
User Rank: Ninja
5/17/2013 | 6:24:22 PM
background preferably in Linux would be my first pick. Why? Most
firewalls, IPSGÇÖs and SPAM engines for instance usually run on some form
of Linux, if not some sort of proprietary OS or firmware under the
covers."
I Totally disagree with that, because, it leads me to believe that you have a Linux background and supposedly only people with Linux backgrounds can do anything, however Linux is NOT the end-all-be-all. I think that the best security personnel do come from the network\sysadmin (Linux, Novell or Microsoft) professions, the problem is getting them to stop thinking like an admin and look at the picture from the point of view of "...is it secure secure or not..." versus "...why isn't it secure or not...", and teach them how to understand the need for policy and why it's important to security, because in almost every case we know why something is not secure, (and network\sysadmins seem to take policy very personal). Also, these converts need to get tougher skin, and understand that when you're the bearer of not so good news nobody ever likes you.