[slackware-security] gnutls (SSA:2013-242-03)

2013-09-02 Thread Slackware Security Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [slackware-security] gnutls (SSA:2013-242-03) New gnutls packages are available for Slackware 14.0 and -current to fix a security issue. Sorry about having to reissue this one -- I pulled it from ftp.gnu.org not realizing that the latest version

[SECURITY] [DSA 2747-1] cacti security update

2013-09-02 Thread Florian Weimer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - Debian Security Advisory DSA-2747-1 secur...@debian.org http://www.debian.org/security/Florian Weimer August 31, 2013

list of vulnerability discovered by RealPentesting

2013-09-02 Thread Pedro Guillen
HI all! I'm part of realpentesting members and although these vulnerability was published some moths ago, now we can publicity with these CVEs identifiers. Also you can get more information about the vulnerablities which we discovered in http://realpentesting.blogspot.com.es/p/advisories.html

Full Disclosure - Multiple vulnerabilities in five Zoom ADSL Modem/Routers

2013-09-02 Thread kyle Lovett
Five models of the Zoom Telephonics ADSL Modem/Router line suffer from multiple critical vulnerabilities, almost all being of a remote access attack vector. Models affected: Zoom X3 ADSL Modem/Router Zoom X4 ADSL Modem/Router Zoom X5 ADSL Modem/Router Zoom ADSL Bridge Modem Model 5715 (1

Defense in depth -- the Microsoft way (part 9): erroneous documentation

2013-09-02 Thread Stefan Kanthak
Hi, in http://seclists.org/fulldisclosure/2013/Aug/75 I documented beginners errors (unquoted pathnames containing spaces) not only in Microsoft products. Microsofts developer documentation but shows these beginners errors too (and is inconsistent, even in single topics). Examples: