Security Bulletin

RISK: Medium Risk

Cisco NX-OS Denial of Service Vulnerability

A vulnerability was identified in Cisco NX-OS. A remote user on the local network can cause the target ARP service to restart. Note: The fix is only available for Cisco Bug ID CSCut25292.

Last Update Date: 14 Sep 2015 Release Date: 4 Sep 2015 3983 Views

RISK: Medium Risk

IBM HTTP Server Denial of Service Vulnerability

A vulnerability was identified in GSKit of IBM HTTP Server, which could allow denial of service.

Last Update Date: 14 Sep 2015 09:36 Release Date: 14 Sep 2015 4108 Views

RISK: High Risk

OpenLDAP Denial Of Service Vulnerability

A vulnerability was identified in OpenLDAP. A remote user can expolit this vulnerability to cause Denial Of Service on the target system.Note: A demonstration exploit code is available

Last Update Date: 11 Sep 2015 09:28 Release Date: 11 Sep 2015 3982 Views

RISK: Medium Risk

IBM HTTP Server Stack Overflow Vulnerability

A vulnerability has been identified in IBM HTTP Server. A remote authenticated user can send specially crafted data to trigger a stack overflow and execute arbitrary code on the target system. The code will run with the privileges of the target web service.

Last Update Date: 10 Sep 2015 09:54 Release Date: 10 Sep 2015 3891 Views

RISK: Medium Risk

Microsoft Windows Hyper-V bypass security restriction Vulnerability

A security feature bypass vulnerability exists in Windows Hyper-V when access control list (ACL) configuration settings are not applied correctly. To exploit the vulnerability, an attacker could run a specially crafted application that could cause Hyper-V to allow ...

Last Update Date: 9 Sep 2015 16:42 Release Date: 9 Sep 2015 4043 Views

RISK: Medium Risk

Microsoft Skype for Business Server and Lync Server Multiple Vulnerabilities

1. A cross-site scripting (XSS) vulnerability, which could result in information disclosure, exists when the jQuery engine in Skype for Business Server or in Lync Server fails to properly sanitize specially crafted content. An attacker who successfully exploited this...

Last Update Date: 9 Sep 2015 16:42 Release Date: 9 Sep 2015 4274 Views

RISK: Medium Risk

Microsoft Exchange Server Multiple Vulnerabilities

1. An information disclosure vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests. An attacker who successfully exploited the vulnerability could discover stacktrace details. To exploit the vulnerability, an attacker would have to...

Last Update Date: 9 Sep 2015 16:33 Release Date: 9 Sep 2015 3942 Views

RISK: Medium Risk

Microsoft Windows Task Management Multiple Vulnerabilities

1. An elevation of privilege vulnerability exists when Microsoft Windows fails to properly validate and enforce impersonation levels. An attacker who successfully exploited this vulnerability could bypass impersonation-level security checks and gain elevated privileges on a targeted system. To exploit the...

Last Update Date: 9 Sep 2015 16:32 Release Date: 9 Sep 2015 4013 Views

RISK: Medium Risk

Microsoft .NET Framework Multiple Vulnerabilities

1. An elevation of privilege vulnerability exists in the way that the .NET Framework validates the number of objects in memory before copying those objects into an array. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker...

Last Update Date: 9 Sep 2015 16:32 Release Date: 9 Sep 2015 3925 Views

RISK: Medium Risk

Microsoft Windows Media Center Vulnerability

A vulnerability exists in Windows Media Center that could allow remote code execution if Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code. An attacker who successfully exploited this vulnerability could gain the same user rights...

Last Update Date: 9 Sep 2015 15:41 Release Date: 9 Sep 2015 3870 Views