Threat Center Security News
Security News
Vulnerability Management Print E-mail
Written by Rebecca Mints   
Tuesday, 18 March 2008 14:16
In today's environment, the importance of good vulnerability management cannot be stressed enough. No matter how much revenue is allocated to securing an environment it can be difficult to buy the ultimate solution that covers all areas of attack. Thankfully there are tools and services available that can severely cut down on risk exposure.
Read more...
 
Vulnerability in Cisco's IPM gets Patch Print E-mail
Written by Rebecca Mints   
Monday, 17 March 2008 16:49
An advisory has been issued by Cisco for their Internetwork Performance Monitor (IPM) version 2.6 for Microsoft Windows and Sun Solaris.  On the CVSS scale this vulnerability ranks an 8.3, giving it a Critical status.  Successful exploitation would allow unauthorized users to execute arbitrary commands.
Read more...
 
iPlayer Vulnerability Fixed Print E-mail
Written by Rebecca Mints   
Friday, 14 March 2008 10:58

A vulnerability that allowed users of iPhones and iPods to download programs has been fixed.  Now the programs can only be streamed, which was the original intent.

Read more...
 
Format String Vulnerability in McAfee Print E-mail
Written by Rebecca Mints   
Thursday, 13 March 2008 16:21

A vulnerability has been discovered in McAfee ePolicy Orchestrator that causes a DoS.  It was discovered by Luigi Auriemma.

Read more...
 
Internet Explorer Vulnerability Print E-mail
Written by Rebecca Mints   
Wednesday, 12 March 2008 16:57
Rapid 7 employee Derek Abdine has discovered an FTP command injection vulnerability in Internet Explorer.  While processing FTP URIs, a vulnerability in IE can surface from an input validation error.  Arbitrary FTP commands may be injected into an FTP session by means of a carefully crafted FTP URI that contains CRLF character sequences and trailing slashes.
Read more...
 


Page 27 of 33

WTW Threat Level