Security Bulletin

RISK: Medium Risk

PHP Multiple Vulnerabilities

Multiple vulnerabilities were identified in PHP. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can view files and obtain potentially sensitive information on the target system.

Last Update Date: 15 Sep 2015 09:27 Release Date: 15 Sep 2015 6163 Views

RISK: Medium Risk

BIND Multiple Denial of Service Vulnerabilities

Multiple vulnerabilities were reported in BIND. A remote user can cause the target service to crash.

Last Update Date: 14 Sep 2015 Release Date: 4 Sep 2015 6092 Views

RISK: Medium Risk

Cisco NX-OS Denial of Service Vulnerability

A vulnerability was identified in Cisco NX-OS. A remote user on the local network can cause the target ARP service to restart. Note: The fix is only available for Cisco Bug ID CSCut25292.

Last Update Date: 14 Sep 2015 Release Date: 4 Sep 2015 6067 Views

RISK: Medium Risk

IBM HTTP Server Denial of Service Vulnerability

A vulnerability was identified in GSKit of IBM HTTP Server, which could allow denial of service.

Last Update Date: 14 Sep 2015 09:36 Release Date: 14 Sep 2015 6206 Views

RISK: High Risk

OpenLDAP Denial Of Service Vulnerability

A vulnerability was identified in OpenLDAP. A remote user can expolit this vulnerability to cause Denial Of Service on the target system.Note: A demonstration exploit code is available

Last Update Date: 11 Sep 2015 09:28 Release Date: 11 Sep 2015 6237 Views

RISK: Medium Risk

IBM HTTP Server Stack Overflow Vulnerability

A vulnerability has been identified in IBM HTTP Server. A remote authenticated user can send specially crafted data to trigger a stack overflow and execute arbitrary code on the target system. The code will run with the privileges of the target web service.

Last Update Date: 10 Sep 2015 09:54 Release Date: 10 Sep 2015 5984 Views

RISK: Medium Risk

Microsoft Windows Hyper-V bypass security restriction Vulnerability

A security feature bypass vulnerability exists in Windows Hyper-V when access control list (ACL) configuration settings are not applied correctly. To exploit the vulnerability, an attacker could run a specially crafted application that could cause Hyper-V to allow ...

Last Update Date: 9 Sep 2015 16:42 Release Date: 9 Sep 2015 6323 Views

RISK: Medium Risk

Microsoft Skype for Business Server and Lync Server Multiple Vulnerabilities

1. A cross-site scripting (XSS) vulnerability, which could result in information disclosure, exists when the jQuery engine in Skype for Business Server or in Lync Server fails to properly sanitize specially crafted content. An attacker who successfully exploited this...

Last Update Date: 9 Sep 2015 16:42 Release Date: 9 Sep 2015 6564 Views

RISK: Medium Risk

Microsoft Exchange Server Multiple Vulnerabilities

1. An information disclosure vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests. An attacker who successfully exploited the vulnerability could discover stacktrace details. To exploit the vulnerability, an attacker would have to...

Last Update Date: 9 Sep 2015 16:33 Release Date: 9 Sep 2015 6007 Views

RISK: Medium Risk

Microsoft Windows Task Management Multiple Vulnerabilities

1. An elevation of privilege vulnerability exists when Microsoft Windows fails to properly validate and enforce impersonation levels. An attacker who successfully exploited this vulnerability could bypass impersonation-level security checks and gain elevated privileges on a targeted system. To exploit the...

Last Update Date: 9 Sep 2015 16:32 Release Date: 9 Sep 2015 6184 Views