Security Bulletin

RISK: Medium Risk

WiFi Protected Setup (WPS) PIN authentication vulnerability

A vulnerability has been identified in WiFi Protected Setup (WPS), which can be exploited by malicious people to bypass security restrictions or cause a denial of service. A design flaw that exists in the WPS specification for the PIN authentication significantly reduces the time required to brute...

Last Update Date: 30 Dec 2011 12:36 Release Date: 30 Dec 2011 4917 Views

RISK: High Risk

Microsoft ASP.NET Hash Table Collision Denail of Service Vulnerability

A vulnerability has been identified in Microsoft ASP.NET. which can be exploited by malicious user to cause denial of service.A remote user can send specially crafted posts to cause significant performance degradation on the target server.The vulnerability occurs due to the way that...

Last Update Date: 30 Dec 2011 Release Date: 29 Dec 2011 5168 Views

RISK: Medium Risk

F5 Enterprise Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in F5 Enterprise Manager, which can be exploited by malicious, local users to gain escalated privileges, by malicious users to cause a DoS (Denial of Service), and by malicious people to bypass certain security restrictions.

Last Update Date: 29 Dec 2011 15:18 Release Date: 29 Dec 2011 5049 Views

RISK: High Risk

GNU inetutils telnetd Buffer Overflow Vulnerability

A vulnerability has been identified in GNU inetutils, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to a boundary error within the "encrypt_keyid()" function (libtelnet/encrypt.c), which can be exploited to cause...

Last Update Date: 28 Dec 2011 15:28 Release Date: 28 Dec 2011 5093 Views

RISK: Medium Risk

HP Managed Printing Administration Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Managed Printing Administration, which can be exploited by malicious people to compromise a vulnerable system.An input sanitisation error in the MPAUploader.Uploader.1.UploadFiles() function can be exploited to create arbitrary files via directory traversal sequences...

Last Update Date: 28 Dec 2011 15:26 Release Date: 28 Dec 2011 5070 Views

RISK: Medium Risk

Microsoft Windows Phone Message Processing Denial of Service Vulnerability

A vulnerability has been identified in Microsoft Windows Phone, which can be exploited by malicious people to cause a DoS (Denial of Service).The vulnerability is caused due to an error in the processing of messages. This can be exploited to trigger a reboot and render...

Last Update Date: 28 Dec 2011 15:20 Release Date: 28 Dec 2011 4798 Views

RISK: Medium Risk

Websense Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Websense products, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a vulnerable system. An unspecified error within the report...

Last Update Date: 28 Dec 2011 15:18 Release Date: 28 Dec 2011 4994 Views

RISK: Medium Risk

Android Browser Certificate Spoofing Vulnerability

A vulnerability has been identified in Android, which can be exploited by malicious people to conduct spoofing attacks.The vulnerability is caused due to Browser displaying wrong certificate information, which can be exploited to trick a user into believing to be connected to a trusted site by...

Last Update Date: 28 Dec 2011 15:02 Release Date: 28 Dec 2011 5009 Views

RISK: Medium Risk

IBM Lotus Domino Authentication Processing Denial of Service Vulnerability

A vulnerability has been identified in IBM Lotus Domino. A remote user can cause denial of service conditions.A remote user can send a specially crafted packet to the target Domino Server via Notes RPC to cause the target server to crash.The vulnerability occurs during Notes...

Last Update Date: 28 Dec 2011 14:55 Release Date: 28 Dec 2011 5207 Views

RISK: Medium Risk

Mozilla Firefox / Thunderbird JAR File Handling Vulnerability

A vulnerability has been identified in Mozilla Firefox and Thunderbird, which can be exploited by malicious people to compromise a user's system.A malicious JAR file could be downloaded and executed if a user is convinced into holding down the "Enter" key via e...

Last Update Date: 23 Dec 2011 10:22 Release Date: 23 Dec 2011 5311 Views