Blogs

Samba 'client/mount.cifs.c' Local Denial of Service Vulnerability

http://www.securityfocus.com/bid/38326/info

"Samba is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to corrupt system files,
resulting in a denial-of-service condition. Other attacks may be possible.

Samba 3.4.5 and earlier are vulnerable."

It is recommended to update to the latest version of samba to avoid this
vulnerability. Due to the nature of this vulnerability, it should be
treated as:

Opera 10.50 (with Opera Widgets for Desktop) for Windows released

http://www.opera.com/docs/changelogs/windows/1050/

This release of Opera includes two security updates:

* Fixed vulnerability in Renegotiation feature of the TLS protocol
* Fixed a moderately severe security issue; details will be disclosed at
a later date.

It is recommended that Opera users on Windows platforms update their
browsers to the latest release.

Thanks,
Brian

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

http://www.kb.cert.org/vuls/id/166739

"The web management interface for the APC Network Monitoring Card (NMC)
used in various APC devices contains cross-site scripting (XSS) and
cross-site request forgery (CSRF/XSRF) vulnerabilities. By convincing a
victim to load a specially crafted URL while authenticated to an NMC, an
attacker could obtain credentials or perform certain actions as the
victim, including turning off the NMC-based device and any systems
attached to it. "

APC Network Management Card web interface vulnerable to cross-site scripting and cross-site request forgery

http://www.kb.cert.org/vuls/id/166739

"The web management interface for the APC Network Monitoring Card (NMC)
used in various APC devices contains cross-site scripting (XSS) and
cross-site request forgery (CSRF/XSRF) vulnerabilities. By convincing a
victim to load a specially crafted URL while authenticated to an NMC, an
attacker could obtain credentials or perform certain actions as the
victim, including turning off the NMC-based device and any systems
attached to it. "

Pages