Security Bulletin

RISK: Medium Risk

MIT Kerberos krb5 Telnet Daemon and Client Buffer Overflow Vulnerability

A vulnerability has been identified in the telnet daemon (telnetd) and telnet client of MIT Kerberos krb5, which can be exploited by unauthenticated remote attacker to cause a buffer overflow and probably execute arbitrary code with the privileges of the telnet daemon.

Last Update Date: 4 Jan 2012 11:16 Release Date: 4 Jan 2012 5937 Views

RISK: High Risk

Multiple programming languages and frameworks Hash Table collision denial of service vulnerability

A vulnerability has been identified in multiple web programming languages and frameworks, which can be exploited by malicious people to cause a DoS (Denial of Service). A variety of programming languages and platforms suffered from a Denial of Service (DoS) condition against storage functions of...

Last Update Date: 30 Dec 2011 18:10 Release Date: 30 Dec 2011 5916 Views

RISK: High Risk

Microsoft ASP .NET Framework Multiple Vulnerabilities

Collisions in HashTable May Cause DoS Vulnerability A denial of service vulnerability exists in the way that ASP.NET Framework handles specially crafted requests, causing a hash collision. An attacker who successfully exploited this vulnerability could send a small number of specially crafted requests to an...

Last Update Date: 30 Dec 2011 18:08 Release Date: 30 Dec 2011 5919 Views

RISK: Medium Risk

WiFi Protected Setup (WPS) PIN authentication vulnerability

A vulnerability has been identified in WiFi Protected Setup (WPS), which can be exploited by malicious people to bypass security restrictions or cause a denial of service. A design flaw that exists in the WPS specification for the PIN authentication significantly reduces the time required to brute...

Last Update Date: 30 Dec 2011 12:36 Release Date: 30 Dec 2011 5671 Views

RISK: High Risk

Microsoft ASP.NET Hash Table Collision Denail of Service Vulnerability

A vulnerability has been identified in Microsoft ASP.NET. which can be exploited by malicious user to cause denial of service.A remote user can send specially crafted posts to cause significant performance degradation on the target server.The vulnerability occurs due to the way that...

Last Update Date: 30 Dec 2011 Release Date: 29 Dec 2011 5922 Views

RISK: Medium Risk

F5 Enterprise Manager Multiple Vulnerabilities

Multiple vulnerabilities have been identified in F5 Enterprise Manager, which can be exploited by malicious, local users to gain escalated privileges, by malicious users to cause a DoS (Denial of Service), and by malicious people to bypass certain security restrictions.

Last Update Date: 29 Dec 2011 15:18 Release Date: 29 Dec 2011 5791 Views

RISK: High Risk

GNU inetutils telnetd Buffer Overflow Vulnerability

A vulnerability has been identified in GNU inetutils, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to a boundary error within the "encrypt_keyid()" function (libtelnet/encrypt.c), which can be exploited to cause...

Last Update Date: 28 Dec 2011 15:28 Release Date: 28 Dec 2011 5823 Views

RISK: Medium Risk

HP Managed Printing Administration Multiple Vulnerabilities

Multiple vulnerabilities have been identified in HP Managed Printing Administration, which can be exploited by malicious people to compromise a vulnerable system.An input sanitisation error in the MPAUploader.Uploader.1.UploadFiles() function can be exploited to create arbitrary files via directory traversal sequences...

Last Update Date: 28 Dec 2011 15:26 Release Date: 28 Dec 2011 5801 Views

RISK: Medium Risk

Microsoft Windows Phone Message Processing Denial of Service Vulnerability

A vulnerability has been identified in Microsoft Windows Phone, which can be exploited by malicious people to cause a DoS (Denial of Service).The vulnerability is caused due to an error in the processing of messages. This can be exploited to trigger a reboot and render...

Last Update Date: 28 Dec 2011 15:20 Release Date: 28 Dec 2011 5514 Views

RISK: Medium Risk

Websense Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Websense products, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, and compromise a vulnerable system. An unspecified error within the report...

Last Update Date: 28 Dec 2011 15:18 Release Date: 28 Dec 2011 5709 Views