Questions tagged [vulnerabilities]
The vulnerabilities tag has no usage guidance.
0
votes
0answers
11 views
If two websites are on the same server could a hacker use a vulnerability in one site to infiltrate the other?
I have two websites on the same dedicated server.
One is a passion project website that I update sporadically. The second is an e-commerce site that generates some side revenue for me.
I always ...
0
votes
1answer
28 views
Is it enough to deactivate RDP to avoid RPD exploits?
I just got word about the newest known vulnerability of the RDP service. 2 Days ago microsoft made a blog post about it and delivered updates. OS wise even for windows xp.
From what I understand the ...
-1
votes
1answer
45 views
Apache mod_perl Apache::Status Cross Site Scripting Vulnerability, CVE- 2009-0796 [duplicate]
During a scan on our server (PCI-DSS), we found Apache mod_perl Apache::Status Cross Site Scripting Vulnerability, CVE- 2009-0796.
I did a lot of search on google and came up with no clear solution. ...
0
votes
0answers
78 views
Service bus gives error after upgrading to TLS 1.2
Due to security vulnerabilities, we recently decided to remove TLS 1.0, TLS 1.1 and SSL 3.0 from web and database servers. Due to this change, we had to upgrade Service Bus 1.0 to its higher version ...
0
votes
0answers
17 views
Cloud server vulnerability analysis [duplicate]
I have multiple Hetzner cloud servers (Ubuntu 18.04) and I have encrypted the home directory with a +128-bit encryption using cryptsetup/LUKS. The server may only be accessed with SSH or Wireguard. ...
0
votes
1answer
32 views
Windows Services Vulnerable to Tampering Mitigation
I am testing some software with Microsoft's Attack Surface Analyzer. I took a baseline and after installation scan of the software I am testing. When I create a report it shows that a certain service ...
0
votes
0answers
26 views
Attack Surface Analyzer report possible actions
I am using Microsoft's Attack Surface Analyzer, and I would like to get a better understanding of what would be the best way to mitigate the findings.
For example if in my report I get Directories ...
0
votes
1answer
124 views
KVM, CentOS and CVE-2018-3639
Today news have reached me about specter (https://access.redhat.com/security/cve/cve-2018-3639). I'm running CentOS and kvm infrastructure. Fix is critical and planning to deploy it in few days. I ...
0
votes
1answer
237 views
“Critical” vulnerability rating on OpenVAS 9
I'm using OpenVAS 9 and I noticed that all the vulnerabilities ranking from 7.0 to 10.0 are labeled as "High".
Is there a way to change this behavior, so that all the ones ranking from 9.0 to 10.0 ...
2
votes
1answer
1k views
Metltdown/Spectre Mitigations on Windows 2008 R2 guest on VmWare ESXi5.5
I do see that I can't enable the Meltdown/Spectre mitigations in Windows Server 2008 R2 is a similar question, but I suppose that the environment differences may justify different remedies.
After ...
1
vote
0answers
257 views
microcode_ctl vs kernel-firmware
I have read that CPU microcode updates are delivered by the kernel-firmware package and microcode_ctl is obsolete: Source #1 Source #2
But i believe this is not true because at the Red Hat Security ...
42
votes
4answers
18k views
I updated my CentOS 7 system. Why is Meltdown/Spectre only partially mitigated?
Like many of us, I spent yesterday updating a whole lot of systems to mitigate the Meltdown and Spectre attacks. As I understand it, it is necessary to install two packages and reboot:
kernel-3.10.0-...
4
votes
6answers
8k views
I can't enable the Meltdown/Spectre mitigations in Windows Server 2008 R2
I have installed the patch released today as detailed here and then set the two registry keys as mentioned:
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory ...
12
votes
2answers
2k views
Meltdown & Spectre - Does patching the guest kernel of an unpatched hypervisor prevent cross-VM memory leaks?
24 hours after the wide scale release of the vulnerabilities, Rackspace is silent about Spectre and Meltdown. They do not have a plan for patching all of their Xen hypervisors. All their newer ...
0
votes
1answer
39 views
Same version after patching wpa_supplicant 2.4
Why is the version number of wpa_supplicant not increased, when I look with 'man wpa_supplicant' at the bottom it says 16 October 2017 but with 'wpa_supplicant -v' I see v2.4, which is especially ...
0
votes
1answer
25 views
Fetch changelogs for multiple Linux distros?
I'm trying to build a service that can take a distro, package, and a version number, and use that information to check if there's an active CVE out for that tuple.
after some searching, I've found ...
0
votes
0answers
39 views
Which update scheme is better for an unattended Ubuntu server
I'm in a situation where I have to deploy an ubuntu server for a Client (they do not have a Sysadmin), and it will serve as an HTTP API backend for an app.
The catch is that after the deployment they ...
1
vote
1answer
613 views
Freebsd: pkg audit spread out in time over different servers
We have several Freebsd servers, where we check daily for vulnerabilities with pkg audit.
Question: Very often, the same vulnerability is reported in some servers only, and then in some others the ...
1
vote
2answers
58 views
Is omitting a PC password within my Win 8.1 LAN constituting a security risk from the outside world?
In my Windows 8.1 LAN consisting of 14 computers, there are several servers which are dedicated to very specific tasks. (For example is the "Save Server" responsible to run a daily batch script, which ...
3
votes
1answer
1k views
Tomcat Virtual Host to prevent Improper-Input-Handling attack
I'm currently on the process of trying fix a site vulnerability, basically it is one type of the "Improper Input Handling" attack.
Let's say my website is www.mywebsite.com
and there is hacker's ...
1
vote
1answer
851 views
CONNECT Method Allowed in HTTP Server Or HTTP Proxy Server Vulnerability
My setup details:
OS : RHEL7
Webserver : Apache http server(SSL enabled)
AppContainer : NodeJS
Webserver connects to NodeJS via mod_proxy.
I blocked the connect method in apache ...
0
votes
1answer
205 views
How to check if Chromium OS vulnerable to Dirty COW?
I'm running some projects on Kubernetes clusters on the Google Compute Engine. The nodes which form the cluster run on Container-VM, a Chromium OS based image specifically designed for nodes on GCE. ...
google-compute-engine
-2
votes
2answers
79 views
Risks of not updating an Ubuntu server on a local network?
Through work I recently came across a server that is used by 10-20 users daily as a sort of web server. It is running Ubuntu 12 and it has not been updated for a very long time it seems. Currently ...
0
votes
2answers
161 views
How do I test my znc's SSL port against various SSL vulnerabilities?
My znc's SSL port is not 443. Various SSL vulnerability tests on the web work only on 443 port.
znc SSL port serves a web server and an IRC bouncer simultaneously.
How can I test whether znc SSL ...
0
votes
2answers
2k views
Should I expect reception of packets in hping3 --flood?
I'm testing a newly purchased VPS for DDoS vulnerability using hping3.
If I do not use --flood, everything goes fine and I see close to 0% packet loss every time. But If I do use --flood, then the ...
2
votes
2answers
494 views
Upgrade SSL/TLS/Openssl?
I have a requirement to upgrade SSL/TLS/OpenSSL. The server is RHEL 6 Enterprise.
In that server I am going to remove apache, which has not been not in use for a long time. After uninstalling ...
0
votes
1answer
769 views
vulnerability issue in ASP.NET
In our vulnerability report there is one vulnerability which I have mentioned below.
"it was found that the Microsoft ASP.NET validate Request filters could allow a remote attacker to bypass it's ...
27
votes
3answers
8k views
What kinds of security vulnerabilities does providing DNSSEC expose?
I was planning to sign my DNS zone with DNSSEC. My zone, the registrar and my DNS server (BIND9) all support DNSSEC. The only one who doesn't support DNSSEC is my secondary nameserver provider (namely ...
2
votes
2answers
2k views
Fix logjam vulnerability in courier
The site weakdh.org explains how to fix postfix against the weak Diffie-Hellman attack called "logjam".
But don't I have to fix courier too? Or do I have to migrate to dovecot to be logjam-safe?
5
votes
5answers
6k views
How to patch CVE-2015-0235 (GHOST) on Debian Lenny and Squeeze?
There is a right way to patch GHOST on Debian Lenny and Squeeze?
According to this link there are no plans to patch Lenny
https://security-tracker.debian.org/tracker/CVE-2015-0235
Thanks!
8
votes
5answers
5k views
How to patch CVE-2015-0235 (GHOST) on debian 7 (wheezy)?
This vulnerability was found in glibc, see this hacker news post for more info.
As described in the debian bug tracker, the vulnerability was already patched in testing and unstable.
I'd like to ...
-1
votes
1answer
274 views
Check my own servers for vulnerabilities [closed]
We are a small early stage startup with not so much money to spend.
We have less than 3 servers that we want to monitor for security issues.
Our website is essentially on one server having:
Ubuntu
...
8
votes
2answers
2k views
In response to the OpenSSL Poodle vulnerability should I disable SSLv3?
OpenSSL just announced another new vulnerability in it's memory routines. You can read all about it here: https://www.openssl.org/news/secadv_20141015.txt
The workaround is to disable SSLv3.
Will ...
1
vote
1answer
48 views
Ways to follow newly discovered vulnerabilities?
I happened to be in a situation where I am in charge for 100+ systems on top of my job as a programmer. Everything we run is Linux (Debian, Ubuntu, Centos) and gladly our sysadmin set everything with ...
0
votes
1answer
218 views
Http 1.1 protocol detected
I have a CentOS server and we had a Retina security scan. I have no idea how to fix this vulnerability. Can you point me in the right direction? We are running nginx.
4
votes
2answers
3k views
Shellshock - “pkg upgrade bash” doesn't update bash to latest 4.3.25
I'm using FreeBSD-9.1-p5.
My security run output:
Checking for packages with security vulnerabilities:
Database fetched: Wed Sep 24 23:01:24 EDT 2014
bash-4.3.24
pkg info bash:
# pkg info bash
...
1
vote
1answer
498 views
Disinfecting a Supermicro IPMI Board
The IPMI board on one of our servers seems to have become infected - we were hit by the "password in the clear" vulnerability - and it seems to have allowed something to have infected by a bot that ...
2
votes
0answers
721 views
Understanding & Resolving Web Server Exploits
We recently had someone contact our company pointing out that we had numerous security threats that could be used to exploit our systems. They were nice enough to provide a list of these to which we ...
13
votes
4answers
474 views
How to convince my Administrator that Java ON A SERVER is not insecure per se?
The Application
We have a small Java application which uses some Camel routes to pick up uploaded files from a webserver, process them and send out some e-mails with the results.
The server on which ...
1
vote
1answer
879 views
Remotely Detect Windows Server Service Pack Level
One of our web servers just failed PCI-DSS compliance because the vulnerability scan detected the OS was Windows Server 2003 Service Pack 1 (obviously very outdated!).
My question is how did the ...
-1
votes
1answer
2k views
Unknown logins in vsftpd - hacked? [duplicate]
I'm running logwatch and there I've seen some strange activity.
There are two different ip adresses (I'll call this guy hacker) where it seems they logged in successfully through vsdftpd: hacker's IP ...
4
votes
1answer
6k views
Is apache 2.2.15 vulnerable on CentOS 6.3?
My server has scanned for vulnerabilities and they are asking that upgrade your Apache server but the CentOS repositories does not provide Apache > 2.2.15. If this version is vulnerable then why ...
0
votes
1answer
123 views
Client Side Negotiation
I have -MultiViews set and SSLInsecureNegotation off ( in ifmodule of mod_ssl.c) in Apache.
But still vulnerability report says I am vulnerable to client side negotiation and "This server is ...
2
votes
1answer
1k views
What are these weird request paths on my Apache server? [duplicate]
Possible Duplicate:
What are these weird access requests?
I'm getting a lot of requests like these in my access.log:
203.186.107.226 - - [16/Oct/2012:07:07:39 +0000] "\xfc\x8f\xd29g\xc7O\x9bM\vE\...
2
votes
2answers
3k views
openVAS - Microsoft RDP Server Private Key Information Disclosure Vulnerability - false Alarm?
I performed a openVAS scan on a Windows Server 2008 R2 and got a report for a high threat level vulnerability called Microsoft RDP Server Private Key Information Disclosure Vulnerability. An remote ...
2
votes
2answers
226 views
Is there any risks by using cat to read a value from a untrusted file
I need to get a variable value by reading from user uploaded text file.
I am doing from a system's script:
resourceVersion=`cat userFile.txt`
mkdir $resourceVersion
...
Can the content of this file ...
1
vote
1answer
95 views
Check that NLM is patched in Netware 6.5
We need to solve vulnerability CVE-2011-4191
"Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or ...
8
votes
5answers
2k views
How to check that a known Windows Vulnerability has been patched?
Is there a way in Windows to check that say Security Bulletin MS**-*** or CVE-****-***** has been patched? e.g. something akin to RedHat's rpm -q --changelog service
Windows 2008 R2 SP1
2
votes
2answers
191 views
Are cross-site scripting vulnerabilities the responsibility of the network/systems admin or developer?
I'm just curious about this.
Say the system was 100% patched up.
Should the administrator also be responsible for cross-site scripting issues?
1
vote
4answers
169 views
Convenient source for information on known exploits (not theoretical)
Forgive me if this question has been asked before or is off-topic.
The past couple of security patches I've installed have been discovered from reading news articles, which publicly discuss security ...
