Security Bulletin

RISK: Medium Risk

Mozilla Firefox Drag and Drop Handling Same Origin Policy Bypass Vulnerability

A vulnerability has been identified in Mozilla Firefox, which can be exploited by malicious people to bypass certain security restrictions.The vulnerability is caused due to an error when handling drag and drop events and can be exploited to bypass the same origin policy and e.g...

Last Update Date: 6 Jan 2012 10:37 Release Date: 6 Jan 2012 4911 Views

RISK: High Risk

OpenSSL Multiple Vulnerabilities

Multiple vulnerabilities have been identified in OpenSSL, which can be exploited by attackers to conduct remote code execution and denial of service. The vulnerabilities can cause the following issues:DTLS Plaintext Recovery Attack (CVE-2011-4108)Double-free in Policy Checks (...

Last Update Date: 5 Jan 2012 11:57 Release Date: 5 Jan 2012 4855 Views

RISK: Medium Risk

MIT Kerberos krb5 Telnet Daemon and Client Buffer Overflow Vulnerability

A vulnerability has been identified in the telnet daemon (telnetd) and telnet client of MIT Kerberos krb5, which can be exploited by unauthenticated remote attacker to cause a buffer overflow and probably execute arbitrary code with the privileges of the telnet daemon.

Last Update Date: 4 Jan 2012 11:16 Release Date: 4 Jan 2012 4818 Views

RISK: High Risk

Multiple programming languages and frameworks Hash Table collision denial of service vulnerability

A vulnerability has been identified in multiple web programming languages and frameworks, which can be exploited by malicious people to cause a DoS (Denial of Service). A variety of programming languages and platforms suffered from a Denial of Service (DoS) condition against storage functions of...

Last Update Date: 30 Dec 2011 18:10 Release Date: 30 Dec 2011 4786 Views

RISK: High Risk

Microsoft ASP .NET Framework Multiple Vulnerabilities

Collisions in HashTable May Cause DoS Vulnerability A denial of service vulnerability exists in the way that ASP.NET Framework handles specially crafted requests, causing a hash collision. An attacker who successfully exploited this vulnerability could send a small number of specially crafted requests to an...

Last Update Date: 30 Dec 2011 18:08 Release Date: 30 Dec 2011 4786 Views

RISK: Medium Risk

WiFi Protected Setup (WPS) PIN authentication vulnerability

A vulnerability has been identified in WiFi Protected Setup (WPS), which can be exploited by malicious people to bypass security restrictions or cause a denial of service. A design flaw that exists in the WPS specification for the PIN authentication significantly reduces the time required to brute...

Last Update Date: 30 Dec 2011 12:36 Release Date: 30 Dec 2011 4581 Views

RISK: High Risk

Microsoft ASP.NET Hash Table Collision Denail of Service Vulnerability

A vulnerability has been identified in Microsoft ASP.NET. which can be exploited by malicious user to cause denial of service.A remote user can send specially crafted posts to cause significant performance degradation on the target server.The vulnerability occurs due to the way that...

Last Update Date: 30 Dec 2011 Release Date: 29 Dec 2011 4836 Views

RISK: Medium Risk

F5 Enterprise Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in F5 Enterprise Manager, which can be exploited by malicious, local users to gain escalated privileges, by malicious users to cause a DoS (Denial of Service), and by malicious people to bypass certain security restrictions.

Last Update Date: 29 Dec 2011 15:18 Release Date: 29 Dec 2011 4719 Views

RISK: High Risk

GNU inetutils telnetd Buffer Overflow Vulnerability

A vulnerability has been identified in GNU inetutils, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to a boundary error within the "encrypt_keyid()" function (libtelnet/encrypt.c), which can be exploited to cause...

Last Update Date: 28 Dec 2011 15:28 Release Date: 28 Dec 2011 4749 Views

RISK: Medium Risk

HP Managed Printing Administration Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Managed Printing Administration, which can be exploited by malicious people to compromise a vulnerable system.An input sanitisation error in the MPAUploader.Uploader.1.UploadFiles() function can be exploited to create arbitrary files via directory traversal sequences...

Last Update Date: 28 Dec 2011 15:26 Release Date: 28 Dec 2011 4740 Views