Security Bulletin

RISK: High Risk

Microsoft ASP.NET Hash Table Collision Denail of Service Vulnerability

A vulnerability has been identified in Microsoft ASP.NET. which can be exploited by malicious user to cause denial of service.A remote user can send specially crafted posts to cause significant performance degradation on the target server.The vulnerability occurs due to the way that...

Last Update Date: 30 Dec 2011 Release Date: 29 Dec 2011 8113 Views

RISK: Medium Risk

F5 Enterprise Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in F5 Enterprise Manager, which can be exploited by malicious, local users to gain escalated privileges, by malicious users to cause a DoS (Denial of Service), and by malicious people to bypass certain security restrictions.

Last Update Date: 29 Dec 2011 15:18 Release Date: 29 Dec 2011 7952 Views

RISK: High Risk

GNU inetutils telnetd Buffer Overflow Vulnerability

A vulnerability has been identified in GNU inetutils, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to a boundary error within the "encrypt_keyid()" function (libtelnet/encrypt.c), which can be exploited to cause...

Last Update Date: 28 Dec 2011 15:28 Release Date: 28 Dec 2011 8154 Views

RISK: Medium Risk

HP Managed Printing Administration Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Managed Printing Administration, which can be exploited by malicious people to compromise a vulnerable system.An input sanitisation error in the MPAUploader.Uploader.1.UploadFiles() function can be exploited to create arbitrary files via directory traversal sequences...

Last Update Date: 28 Dec 2011 15:26 Release Date: 28 Dec 2011 7957 Views

RISK: Medium Risk

Microsoft Windows Phone Message Processing Denial of Service Vulnerability

A vulnerability has been identified in Microsoft Windows Phone, which can be exploited by malicious people to cause a DoS (Denial of Service).The vulnerability is caused due to an error in the processing of messages. This can be exploited to trigger a reboot and render...

Last Update Date: 28 Dec 2011 15:20 Release Date: 28 Dec 2011 7606 Views

RISK: Medium Risk

Websense Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Websense products, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a vulnerable system. An unspecified error within the report...

Last Update Date: 28 Dec 2011 15:18 Release Date: 28 Dec 2011 7870 Views

RISK: Medium Risk

Android Browser Certificate Spoofing Vulnerability

A vulnerability has been identified in Android, which can be exploited by malicious people to conduct spoofing attacks.The vulnerability is caused due to Browser displaying wrong certificate information, which can be exploited to trick a user into believing to be connected to a trusted site by...

Last Update Date: 28 Dec 2011 15:02 Release Date: 28 Dec 2011 7935 Views

RISK: Medium Risk

IBM Lotus Domino Authentication Processing Denial of Service Vulnerability

A vulnerability has been identified in IBM Lotus Domino. A remote user can cause denial of service conditions.A remote user can send a specially crafted packet to the target Domino Server via Notes RPC to cause the target server to crash.The vulnerability occurs during Notes...

Last Update Date: 28 Dec 2011 14:55 Release Date: 28 Dec 2011 8022 Views

RISK: Medium Risk

Mozilla Firefox / Thunderbird JAR File Handling Vulnerability

A vulnerability has been identified in Mozilla Firefox and Thunderbird, which can be exploited by malicious people to compromise a user's system.A malicious JAR file could be downloaded and executed if a user is convinced into holding down the "Enter" key via e...

Last Update Date: 23 Dec 2011 10:22 Release Date: 23 Dec 2011 8167 Views

RISK: High Risk

Mozilla Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird and SeaMonkey, which can be exploited by malicious people to disclose sensitive information and compromise a user's system. Some unspecified errors can be exploited to corrupt memory. An error exists within the YARR regular expression...

Last Update Date: 22 Dec 2011 12:22 Release Date: 22 Dec 2011 7760 Views