Security Bulletin

RISK: Medium Risk

Serv-U FTPS Server Command Channel SSL Negotiation and FTP Server Directory Traversal Vulnerability

Two vulnerability have been identified in Serv-U, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information and manipulate certain data.The vulnerability is caused due to the FTPS server leaving the command channel in an operational state, ...

Last Update Date: 6 Dec 2011 Release Date: 2 Dec 2011 5898 Views

RISK: Medium Risk

HP LaserJet Printers / Digital Senders Unauthorized Firmware Update Vulnerability

A vulnerability has been identified in various HP LaserJet Printers and HP Digital Senders, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an error within the Remote Firmware Update (RFU) mechanism, which does not check...

Last Update Date: 2 Dec 2011 15:27 Release Date: 2 Dec 2011 6932 Views

RISK: High Risk

Schneider Electric Products Multiple Vulnerabilities

Multiple vulnerabilities have been identified in multiple Schneider Electric products, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose potentially sensitive information, and compromise a user's system. Two errors in the TeeChart ActiveX control can be exploited to...

Last Update Date: 30 Nov 2011 10:18 Release Date: 30 Nov 2011 5924 Views

RISK: High Risk

Siemens Automation License Manager Denial of Service and ActiveX Control Vulnerabilities

Multiple vulnerabilities have identified in Siemens Automation License Manager, which can be exploited by malicious people to cause a DoS (Denial of Service) and manipulate certain data.An error in almsrvx.exe when processing certain requests can be exploited to cause an unhandled exception and...

Last Update Date: 29 Nov 2011 10:41 Release Date: 29 Nov 2011 6023 Views

RISK: Medium Risk

Novell NetWare XNFS.NLM "xdrDecodeString()" Buffer Overflow Vulnerability

A vulnerability has been identified in Novell NetWare, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error within the "xdrDecodeString()" function in XNFS.NLM when processing certain NFS requests. This can...

Last Update Date: 25 Nov 2011 10:01 Release Date: 25 Nov 2011 5568 Views

RISK: High Risk

IBM Java Multiple Vulnerabilities

Multiple vulnerabilities have been identified in IBM Java, which can be exploited by malicious users to disclose potentially sensitive information, cause a DoS (Denial of Service), and compromise a vulnerable system. For more information, please refer to SA11101902.

Last Update Date: 24 Nov 2011 09:40 Release Date: 24 Nov 2011 6070 Views

RISK: High Risk

Cisco Security Agent Multiple Remote Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Cisco Security Agent, which can be exploited by unauthenticated attacker to perform remote code execution on the affected device. These vulnerabilities are in a third-party library (Oracle Outside In).

Last Update Date: 22 Nov 2011 14:30 Release Date: 22 Nov 2011 5895 Views

RISK: Medium Risk

Novell Open Enterprise Server iPrint Client "GetDriverSettings()" Buffer Overflow Vulnerability

A vulnerability has been identified in Novell Open Enterprise Server, which can be exploited by malicious people to compromise a user's system. For more information, please refer to SA11102803.

Last Update Date: 22 Nov 2011 14:27 Release Date: 22 Nov 2011 5567 Views

RISK: High Risk

RealPlayer Multiple Vulnerabilities

Multiple vulnerabilities have been identified in RealPlayer, which can be exploited by malicious people to compromise a user's system. Successful exploitation of the vulnerabilities may allow execution of arbitrary code. An unspecified error related to RealVideo rendering can be exploited to cause a heap-...

Last Update Date: 22 Nov 2011 14:26 Release Date: 22 Nov 2011 6279 Views

RISK: Medium Risk

Juniper Junos IPv6 Over IPv4 Tunnel Security Policy Bypass Vulnerability

A vulnerability has been identified in Juniper Junos, which can be exploited by malicious people to bypass certain security restrictions.The vulnerability is caused due to an error when enforcing security policies on IPv6 over IPv4 tunnels. This can lead to certain security policies not being enforced...

Last Update Date: 18 Nov 2011 15:00 Release Date: 18 Nov 2011 6004 Views