The vulnerabilities tag has no wiki summary.
1
vote
1answer
33 views
Remotely Detect Windows Server Service Pack Level
One of our web servers just failed PCI-DSS compliance because the vuln. scan detected the OS was Windows Server 2003 Service Pack 1 (obviously very outdated!).
My question is how did the vuln scan ...
117
votes
5answers
87k views
Disable Java Plugin in Google Chrome?
This is the second time I've had a drive-by executable installed on my machine using the following:
Google Chrome 6 (latest)
Windows 7, UAC on
This happened while I was browsing for images to add ...
1
vote
2answers
98 views
A possible case of hacked email account. What kind of an attack is this? [closed]
I own a Yahoo mail account. I am using this account for sending resumes and receive notifications from various job portals. But yesterday, I found that some 10-15 mails had been sent to random ...
0
votes
2answers
79 views
What is the least dangerous Java version? [closed]
(other than "none")
My organization uses a necessary Java-based web app that will not be replaced in the near future, which runs on Java 1.4 and up. Should our (mostly Windows) users have Java 1.6, ...
1
vote
1answer
43 views
Is there a single site/org for responsible reporting of F/OSS application security vulnerabilities? [closed]
I believe I have found some security vulnerabilities in a popular open-source desktop application, and have contacted one of the application's project organisers via their website. I got in touch ...
1
vote
1answer
77 views
Can a java exploit circumvent browser plug in permission?
Since Java 7 is vulnerable i am asking myself if the vulnerability is circumventing the plug in permission of any given browser.
For example: http://www.youtube.com/watch?v=pn1Rbnidhl8 here you see ...
0
votes
1answer
113 views
Port 1111 revealed to be listening on actiontec dsl modem
So my question is much like this one, Port scan revealed port 1111 open. What is it?, but I wasn't able to investigate with the same techniques suggested here, because the device runs busybox. for ...
1
vote
0answers
127 views
Easiest way to install the Ubuntu Mysql Security Patch
I am looking for a quick and easy way to install the security fix for CVE-2012-2122 on my Ubuntu boxes. I don't want to risk installing any of the other updates and I just want to install the ...
33
votes
12answers
939 views
Password Cracking Windows Accounts
At work we have laptops with encrypted harddrives. Most developers here (on occasion I have been guilty of it too) leave their laptops in hibernate mode when they take them home at night. Obviously, ...
2
votes
2answers
2k views
How does Kerberos' preauthentication increase security?
This FAQ entry (and the RFC itself) states that pre-authentication addresses a weakness in initial implementations of Kerberos that made it vulnerable to offline dictionary attacks.
The FAQ state:
...
2
votes
2answers
1k views
Why is this NMAP scan to a remote host showing me no ports open when the ports REALLY are open?
telnet 99.99.99.99 33491
Trying 99.99.99.99...
Connected to 99.99.99.99..
Escape character is '^]'
^]
telnet> close
Connection closed.
As you can see, the above telnet command shows port 33491 is ...
0
votes
1answer
68 views
Vulnerability scanner for Windows?
Are there good (and preferrably free) vulnerability scanners for Windows?
Please don't suggest update checkers - I know about Secunia PSI, FileHippo and CNET checker.
Secunia PSI 1.5 used to do ...
