SecurityFocus

[SECURITY] [DSA 3509-1] rails security update 2016-03-09
Luciano Bello (luciano debian org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- ------------------------------------------------------------------------
-
Debian Security Advisory DSA-3509-1 security (at) debian (dot) org [email concealed]
https://www.debian.org/security/ Luciano Bello
March 09, 2016

[ more ] [ reply ]

[SECURITY] [DSA 3509-1] rails security update 2016-03-09
Luciano Bello (luciano debian org)

Cisco Security Advisory: Cisco Cable Modem with Digital Voice Remote Code Execution Vulnerability 2016-03-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory:Cisco Wireless Residential Gateway Information Disclosure Vulnerability 2016-03-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Cisco Security Advisory: Cisco Wireless Residential Gateway with EDVA Denial of Service Vulnerability 2016-03-09
Cisco Systems Product Security Incident Response Team (psirt cisco com)

OS-S 2016-12 Linux digi_acceleport Nullpointer Dereference 2016-03-09
Ralf Spenneberg (ralf os-t de)

OS-S Security Advisory 2016-12
Linux digi_acceleport Nullpointer Dereference

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: not yet assigned
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on inv

[ more ] [ reply ]

OS-S 2016-11 Linux wacom multiple Nullpointer Dereferences 2016-03-09
Ralf Spenneberg (ralf os-t de)

OS-S Security Advisory 2016-11
Linux wacom multiple Nullpointer Dereferences

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: not yet assigned
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Multiple Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crash

[ more ] [ reply ]

OS-S 2016-10 Linux visor (treo_attach) Nullpointer Dereference CVE-2016-2782 2016-03-09
Ralf Spenneberg (ralf os-t de)

OS-S Security Advisory 2016-10
Linux visor (treo_attach) Nullpointer Dereference

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: CVE-2016-2782
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on in

[ more ] [ reply ]

OS-S 2016-09 Linux visor clie_5_attach Nullpointer Dereference CVE-2015-7566 2016-03-09
Ralf Spenneberg (ralf os-t de)

OS-S Security Advisory 2016-09
Linux visor clie_5_attach Nullpointer Dereference

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: CVE-2015-7566
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on in

[ more ] [ reply ]

OS-S 2016-08 Linux mct_u232 Nullpointer Dereference 2016-03-09
Ralf Spenneberg (info os-t de)

OS-S Security Advisory 2016-08
Linux mct_u232 Nullpointer Dereference

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: not yet assigned
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid
U

[ more ] [ reply ]

Re: OS-S 2016-06 Linux cdc_acm Nullpointer Dereference 2016-03-09
abdyfhie gmail com

hack

[ more ] [ reply ]

OS-S 2016-07 Linux cypress_m8 Nullpointer Dereference 2016-03-09
Ralf Spenneberg (info os-t de)

OS-S Security Advisory 2016-07
Linux cypress_m8 Nullpointer Dereference

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: not yet assigned
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid

[ more ] [ reply ]

OS-S 2016-06 Linux cdc_acm Nullpointer Dereference 2016-03-09
Ralf Spenneberg (ralf os-t de)

OS-S Security Advisory 2016-06
Linux cdc_acm Nullpointer Dereference

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: not yet assigned
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid
USB

[ more ] [ reply ]

OS-S 2016-05 Linux aiptek Nullpointer Dereference CVE-2015-7515 2016-03-09
Ralf Spenneberg (info os-t de)

OS-S Security Advisory 2016-05
Linux aiptek Nullpointer Dereference

Date: March 4th, 2016
Authors: Sergej Schumilo, Hendrik Schwartke, Ralf Spenneberg
CVE: CVE-2015-7515
CVSS: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)
Title: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid
USB dev

[ more ] [ reply ]

LSE Leading Security Experts GmbH - LSE-2016-01-01 - Wordpress ProjectTheme - Multiple Vulnerabilities 2016-03-09
LSE-Advisories (advisories lsexperts de)

=== LSE Leading Security Experts GmbH - Security Advisory 2016-01-01 ===

Wordpress ProjectTheme Multiple Vulnerabilities

- ------------------------------------------------------------

Affected Version

================

Project Theme: 2.0.9.5

Problem Overview

================

Technical

[ more ] [ reply ]

Thomson TWG850 Wireless Router Multiple Vulnerabilities 2016-03-09
Sebastian Perez (s3bap3 gmail com)

[System Affected]
Thomson Router
HW Revision 2.0
VENDOR Thomson
BOOT Revision 2.1.7i
MODEL TWG850-4U
Software Version ST9D.01.09
Serial Number 00939902404041
Firmware Name TWG850-4U-9D.01.09-100528-S-001.bin

[Vulnerabilities]
1- Cross-Site Request Forgery
2- Unauthenticated access to resources
3- P

[ more ] [ reply ]

[slackware-security] mozilla-firefox (SSA:2016-068-01) 2016-03-08
Slackware Security Team (security slackware com)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] mozilla-firefox (SSA:2016-068-01)

New mozilla-firefox packages are available for Slackware 14.1 and -current to
fix security issues.

Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/p

[ more ] [ reply ]

[slackware-security] samba (SSA:2016-068-02) 2016-03-08
Slackware Security Team (security slackware com)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] samba (SSA:2016-068-02)

New samba packages are available for Slackware 14.1 and -current to
fix security issues.

Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/samba-4.1.23

[ more ] [ reply ]

Windows Mail Find People DLL side loading vulnerability 2016-03-08
Securify B.V. (lists securify nl) (1 replies)

------------------------------------------------------------------------

Windows Mail Find People DLL side loading vulnerability
------------------------------------------------------------------------

Yorick Koster, September 2015

-------------------------------------------------------------------

[ more ] [ reply ]

Re: Windows Mail Find People DLL side loading vulnerability 2016-03-09
Stefan Kanthak (stefan kanthak nexgo de) (1 replies)

Re: Windows Mail Find People DLL side loading vulnerability 2016-03-09
Securify B.V. (lists securify nl)

[security bulletin] HPSBHF03557 rev.1 - HPE Networking Products using Comware 7 (CW7) running NTP, Remote Denial of Service (DoS) 2016-03-08
security-alert hpe com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Note: the current version of the following document is available here:
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=
emr_n
a-c05033748

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c05033748
Version: 1

HPSBHF03557 r

[ more ] [ reply ]

[slackware-security] php (SSA:2016-067-01) 2016-03-08
Slackware Security Team (security slackware com)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security] php (SSA:2016-067-01)

New php packages are available for Slackware 14.0, 14.1, and -current to
fix security issues.

Here are the details from the Slackware 14.1 ChangeLog:
+--------------------------+
patches/packages/php-5.6.1

[ more ] [ reply ]

ESA-2016-012: EMC Documentum xCP ? User Information Disclosure Vulnerability 2016-03-07
Security Alert (Security_Alert emc com)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ESA-2016-012: EMC Documentum xCP ? User Information Disclosure Vulnerability

EMC Identifier: ESA-2016-012

CVE Identifier: CVE-2016-0886

Severity Rating: CVSS v3 Base Score: 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Affected products:

? EMC D

[ more ] [ reply ]

Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) 2016-03-07
Dubbju gmail com

In the Video you can see that he unlock the Phone with his forefinger.

1)In 2:14 mins he show the Lockscreen.
2)Then he Unlock his Screen with his forefinger in 2:17.
3)For the "Exploit" he start Siri in the Lockscreen(2:23) with his !!Forefinger!! At this Time he unlock the Screen with his finger.

[ more ] [ reply ]

Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) 2016-03-07
Vulnerability Lab (research vulnerability-lab com) (1 replies)

Document Title:
===============
Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link)

References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1778

Video: http://www.vulnerability-lab.com/get_conten

[ more ] [ reply ]

Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) 2016-03-07
Edsel Adap (edsel adap org) (1 replies)

Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link) 2016-03-08
Michael Lima (mickael m lima gmail com)

[SECURITY] [DSA 3508-1] jasper security update 2016-03-06
Salvatore Bonaccorso (carnil debian org)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- ------------------------------------------------------------------------
-
Debian Security Advisory DSA-3508-1 security (at) debian (dot) org [email concealed]
https://www.debian.org/security/ Salvatore Bonaccorso
March 06, 2016

[ more ] [ reply ]

Multiple vulnerabilities in Wordpress plugin SP Projects & Document Manager 2016-03-06
mail michaelhelwig de

* Exploit Title: Multiple Vulnerabilities in SP Projects & Document Manager
* Discovery Date: 2016/01/13
* Public Disclosure Date: 2016/03/06
* Exploit Author: Michael Helwig
* Contact: https://twitter.com/c0dmtr1x
* Vendor Homepage: http://smartypantsplugins.com/
* Software Link: https://de.wordpre

[ more ] [ reply ]