Questions tagged [vulnerabilities]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1
votes
0answers
18 views

Update Apache Tomcat for Jasper Reports Server

I have recently installed Jasper Reports Server (Community) on a machine thats being constantly monitored. The Apache Tomcat over which JRS is running, came bundled with installer. Because of this, I ...
1
vote
0answers
35 views

Recommendation to fix the slow HTTP post vulnerability reported by Qualys on IIS

I am trying to solve a vulnerability in an IIS server (Reported by Qualys) in which we have a "Slow HTTP Post DDoS" risk and we already apply the following solution: Delimit the request ...
0
votes
0answers
21 views

Azure DevOps Pipeline: Code scanner with notifications

We are currently using the WhiteSource Bolt task in our Azure DevOps pipeline to scan our code for known vulnerabilities. This task will produce a report on the pipeline level, plus there is also a ...
0
votes
1answer
66 views

How to fix Weak TLS 1.2 Encryption

I have a requirement to disable below weak TLS ciphers in Windows Server 2016. I tried to reasearch and it says "The Microsoft SCHANNEL team does not support directly manipulating the Group ...
0
votes
1answer
236 views

Prevent TLS/SSL Birthday attacks on 64-bit block ciphers (SWEET32)

Our recent VA report shows that there are TLS/SSL Birthday attacks on 64-bit block ciphers possible on Kubernetes etcd ports. Suggested solution is Configure the server to disable support for 3DES ...
0
votes
2answers
35 views

Cleaning and upgrading legacy infrastructure

I am a fullstack engineer in a small company, and I am responsible for everything related to technology, from infrastructure, to code. I arrived a few months ago, and quickly realised that there were ...
0
votes
0answers
17 views

ACR advisor recommendation shows issues with docker container packages even though there are already the recommended package versions installed

For some of debian based docker images in our ACR, Azure security center reports the below issue: Issue: 177622-Debian Security Update for zlib Solution: For Debian 8 "Jessie", these ...
0
votes
1answer
32 views

Does the BootHole Vulnerability Effect Grub1 or Only Grub2?

I've been doing some reading on BootHole to help understand our attack surface and see everything talking about GRUB2, but nothing about GRUB "Legacy" or GRUB1. Wondering if it has tested ...
0
votes
0answers
22 views

Fix vulnerabilities for Azure ACR

Can someone please advise on how to fix the vulnerabilities found by Klar using Clair scanner for my Azure ACR image. I'm still new to working with containers. Here is a sample of the result from Klar ...
2
votes
0answers
25 views

How do I secure my PHP forms that communicate with my MySQL Server? [closed]

They are just the basic forms, they take in $input from the form and then store that directly in to the database, there is another form where it takes $input and searches for a hashed match for it. ...
1
vote
1answer
90 views

Server infected by recent cryptojacking malware but different (?) entry point

One of my servers has been infected by this cryptojacking malware (reporting to the very same IP than in the article). It seems known for this malware to propagate through some Confluence ...
0
votes
0answers
63 views

How can I determine whether I'm vulnerable to SPECTRE/Meltdown/L1TF on Ubuntu

I'm running Ubuntu 18.04, and I have the following linux-image and intel-microcode packages: ii linux-image-4.18.0-17-generic 4.18.0-17.18~18.04.1 amd64 Signed ...
-1
votes
1answer
37 views

What does ISIC option “-t” mean?

As I already found out, ISIC tool has an option "-t" only for tcpsic or tcpsic6 and it means percentage of packets with wrong checksum. In tcpsic case my router works fine. But when Ive been testing ...
0
votes
1answer
210 views

Still receiving “Message frozen” warnings after fixing Exim CVE-2019-10149 critical vulnerability

After upgrading Exim4 to an official patched version fixing CVE-2019-10149 vulnerability (i.e. exim4_4.89-2+deb9u4) on my Debian stable server, I still get the "Message frozen" warnings about ...
0
votes
1answer
495 views

Sudden unidentified frozen emails with code injection-like recipient

I am suddenly receiving a number of curious "Message frozen" emails from my server (Exim 4.89, Debian stable) : Message 1hcbPR-0005t1-2r has been frozen (delivery error message). The sender ...
0
votes
1answer
70 views

Is it enough to deactivate RDP to avoid RPD exploits?

I just got word about the newest known vulnerability of the RDP service. 2 Days ago microsoft made a blog post about it and delivered updates. OS wise even for windows xp. From what I understand the ...
0
votes
0answers
23 views

Cloud server vulnerability analysis [duplicate]

I have multiple Hetzner cloud servers (Ubuntu 18.04) and I have encrypted the home directory with a +128-bit encryption using cryptsetup/LUKS. The server may only be accessed with SSH or Wireguard. ...
0
votes
1answer
49 views

Windows Services Vulnerable to Tampering Mitigation

I am testing some software with Microsoft's Attack Surface Analyzer. I took a baseline and after installation scan of the software I am testing. When I create a report it shows that a certain service ...
0
votes
1answer
137 views

KVM, CentOS and CVE-2018-3639

Today news have reached me about specter (https://access.redhat.com/security/cve/cve-2018-3639). I'm running CentOS and kvm infrastructure. Fix is critical and planning to deploy it in few days. I ...
0
votes
1answer
810 views

“Critical” vulnerability rating on OpenVAS 9

I'm using OpenVAS 9 and I noticed that all the vulnerabilities ranking from 7.0 to 10.0 are labeled as "High". Is there a way to change this behavior, so that all the ones ranking from 9.0 to 10.0 ...
2
votes
1answer
1k views

Metltdown/Spectre Mitigations on Windows 2008 R2 guest on VmWare ESXi5.5

I do see that I can't enable the Meltdown/Spectre mitigations in Windows Server 2008 R2 is a similar question, but I suppose that the environment differences may justify different remedies. After ...
1
vote
0answers
286 views

microcode_ctl vs kernel-firmware

I have read that CPU microcode updates are delivered by the kernel-firmware package and microcode_ctl is obsolete: Source #1 Source #2 But i believe this is not true because at the Red Hat Security ...
42
votes
4answers
20k views

I updated my CentOS 7 system. Why is Meltdown/Spectre only partially mitigated?

Like many of us, I spent yesterday updating a whole lot of systems to mitigate the Meltdown and Spectre attacks. As I understand it, it is necessary to install two packages and reboot: kernel-3.10.0-...
4
votes
6answers
10k views

I can't enable the Meltdown/Spectre mitigations in Windows Server 2008 R2

I have installed the patch released today as detailed here and then set the two registry keys as mentioned: reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory ...
12
votes
2answers
2k views

Meltdown & Spectre - Does patching the guest kernel of an unpatched hypervisor prevent cross-VM memory leaks?

24 hours after the wide scale release of the vulnerabilities, Rackspace is silent about Spectre and Meltdown. They do not have a plan for patching all of their Xen hypervisors. All their newer ...
0
votes
1answer
40 views

Same version after patching wpa_supplicant 2.4

Why is the version number of wpa_supplicant not increased, when I look with 'man wpa_supplicant' at the bottom it says 16 October 2017 but with 'wpa_supplicant -v' I see v2.4, which is especially ...
0
votes
1answer
32 views

Fetch changelogs for multiple Linux distros?

I'm trying to build a service that can take a distro, package, and a version number, and use that information to check if there's an active CVE out for that tuple. after some searching, I've found ...
0
votes
0answers
42 views

Which update scheme is better for an unattended Ubuntu server

I'm in a situation where I have to deploy an ubuntu server for a Client (they do not have a Sysadmin), and it will serve as an HTTP API backend for an app. The catch is that after the deployment they ...
1
vote
1answer
1k views

Freebsd: pkg audit spread out in time over different servers

We have several Freebsd servers, where we check daily for vulnerabilities with pkg audit. Question: Very often, the same vulnerability is reported in some servers only, and then in some others the ...
1
vote
2answers
63 views

Is omitting a PC password within my Win 8.1 LAN constituting a security risk from the outside world?

In my Windows 8.1 LAN consisting of 14 computers, there are several servers which are dedicated to very specific tasks. (For example is the "Save Server" responsible to run a daily batch script, which ...
3
votes
1answer
3k views

Tomcat Virtual Host to prevent Improper-Input-Handling attack

I'm currently on the process of trying fix a site vulnerability, basically it is one type of the "Improper Input Handling" attack. Let's say my website is www.mywebsite.com and there is hacker's ...
1
vote
1answer
2k views

CONNECT Method Allowed in HTTP Server Or HTTP Proxy Server Vulnerability

My setup details: OS : RHEL7 Webserver : Apache http server(SSL enabled) AppContainer : NodeJS Webserver connects to NodeJS via mod_proxy. I blocked the connect method in apache ...
0
votes
1answer
211 views

How to check if Chromium OS vulnerable to Dirty COW?

I'm running some projects on Kubernetes clusters on the Google Compute Engine. The nodes which form the cluster run on Container-VM, a Chromium OS based image specifically designed for nodes on GCE. ...
-2
votes
2answers
113 views

Risks of not updating an Ubuntu server on a local network?

Through work I recently came across a server that is used by 10-20 users daily as a sort of web server. It is running Ubuntu 12 and it has not been updated for a very long time it seems. Currently ...
0
votes
2answers
247 views

How do I test my znc's SSL port against various SSL vulnerabilities?

My znc's SSL port is not 443. Various SSL vulnerability tests on the web work only on 443 port. znc SSL port serves a web server and an IRC bouncer simultaneously. How can I test whether znc SSL ...
0
votes
2answers
3k views

Should I expect reception of packets in hping3 --flood?

I'm testing a newly purchased VPS for DDoS vulnerability using hping3. If I do not use --flood, everything goes fine and I see close to 0% packet loss every time. But If I do use --flood, then the ...
2
votes
2answers
518 views

Upgrade SSL/TLS/Openssl?

I have a requirement to upgrade SSL/TLS/OpenSSL. The server is RHEL 6 Enterprise. In that server I am going to remove apache, which has not been not in use for a long time. After uninstalling ...
0
votes
1answer
915 views

vulnerability issue in ASP.NET

In our vulnerability report there is one vulnerability which I have mentioned below. "it was found that the Microsoft ASP.NET validate Request filters could allow a remote attacker to bypass it's ...
28
votes
3answers
8k views

What kinds of security vulnerabilities does providing DNSSEC expose?

I was planning to sign my DNS zone with DNSSEC. My zone, the registrar and my DNS server (BIND9) all support DNSSEC. The only one who doesn't support DNSSEC is my secondary nameserver provider (namely ...
2
votes
2answers
2k views

Fix logjam vulnerability in courier

The site weakdh.org explains how to fix postfix against the weak Diffie-Hellman attack called "logjam". But don't I have to fix courier too? Or do I have to migrate to dovecot to be logjam-safe?
5
votes
5answers
6k views

How to patch CVE-2015-0235 (GHOST) on Debian Lenny and Squeeze?

There is a right way to patch GHOST on Debian Lenny and Squeeze? According to this link there are no plans to patch Lenny https://security-tracker.debian.org/tracker/CVE-2015-0235 Thanks!
8
votes
5answers
5k views

How to patch CVE-2015-0235 (GHOST) on debian 7 (wheezy)?

This vulnerability was found in glibc, see this hacker news post for more info. As described in the debian bug tracker, the vulnerability was already patched in testing and unstable. I'd like to ...
-1
votes
1answer
287 views

Check my own servers for vulnerabilities [closed]

We are a small early stage startup with not so much money to spend. We have less than 3 servers that we want to monitor for security issues. Our website is essentially on one server having: Ubuntu ...
8
votes
2answers
2k views

In response to the OpenSSL Poodle vulnerability should I disable SSLv3?

OpenSSL just announced another new vulnerability in it's memory routines. You can read all about it here: https://www.openssl.org/news/secadv_20141015.txt The workaround is to disable SSLv3. Will ...
1
vote
1answer
51 views

Ways to follow newly discovered vulnerabilities?

I happened to be in a situation where I am in charge for 100+ systems on top of my job as a programmer. Everything we run is Linux (Debian, Ubuntu, Centos) and gladly our sysadmin set everything with ...
0
votes
1answer
274 views

Http 1.1 protocol detected

I have a CentOS server and we had a Retina security scan. I have no idea how to fix this vulnerability. Can you point me in the right direction? We are running nginx.
4
votes
2answers
3k views

Shellshock - “pkg upgrade bash” doesn't update bash to latest 4.3.25

I'm using FreeBSD-9.1-p5. My security run output: Checking for packages with security vulnerabilities: Database fetched: Wed Sep 24 23:01:24 EDT 2014 bash-4.3.24 pkg info bash: # pkg info bash ...
0
votes
1answer
547 views

Disinfecting a Supermicro IPMI Board

The IPMI board on one of our servers seems to have become infected - we were hit by the "password in the clear" vulnerability - and it seems to have allowed something to have infected by a bot that ...
2
votes
0answers
840 views

Understanding & Resolving Web Server Exploits

We recently had someone contact our company pointing out that we had numerous security threats that could be used to exploit our systems. They were nice enough to provide a list of these to which we ...
13
votes
4answers
514 views

How to convince my Administrator that Java ON A SERVER is not insecure per se?

The Application We have a small Java application which uses some Camel routes to pick up uploaded files from a webserver, process them and send out some e-mails with the results. The server on which ...