Chercher :
Newsletter :  
Exoscan : audit gratuit de failles
Revue :
- Tous
- Français
- Par mot clé
- Par site
- Le tagwall



Sommaires :
- Tendances
- Failles
- Virus
- Concours
- Reportages
- Acteurs
- Outils
- Breves
- Infrastructures
- Livres
- Tutoriels
- Interviews
- Podcasts
- Communiques
- Commentaires

Top :
- Ensemble
- Articles
- Revue
- Videos
- Auteurs


Articles :
- Par mot clé
- Par auteur
- Par organisme
- Le tagwall


Videos :
- Toutes
- Par mot clé
- Par site
- Le tagwall


Exostat :
:: Détails tests
:: Top Failles
:: Top Divers
:: Top Tests

Secumail :
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis

RSS/XML :
- Articles
- Brèves
- Revue
- Revue FR
- Videos
- Secunia
- Full Disclosure
- Bugtraq
- DailyDave
- Vulnwatch
- Vulndiscuss
- FunSec
- Focus-IDS
- WebAppSec
- Security-Basis

RSS SecuObs :
- sécurité
- windows
- exploit
- réseau
- vulnérabilité
- système

RSS Revue :
- security
- microsoft
- windows
- vulnérabilité
- network
- google

RSS Videos :
- virus
- spyware
- vmware
- firmware
- biometric
- lockpicking









Tous
Français



Revue de presse francophone :
- SIP : la fin du PBX dans les centres d'appels
- Fibre optique : le retard français aux journées internationales de l'IDATE
- Qui vole un film, vole un boeuf
- Action policière contre le warez Français
- La mafia Napolitaine investit dans le warez
- SIP : la fin du PBX dans les centres de contacts
- Sécurité > Passerelles de sécurité : Finjan lève 22 millions de dollars
- Arrêt de Grande Chambre 12/11/2008
- Mesures provisoires accordées - 18/11/2008
- Arrêts récents - 14/11/2008
- Salon Infosecurity : les tendances
- Les spécifications de l'USB 3.0 rendues publiques
- Audience en novembre
- Symantec Backup Exec pour Windows Servers : Vulnérabilités Diverses
- HP OpenView Network Node Manager : Vulnérabilités Cross-Site Scripting

Mini-Tagwall
Revue de presse : security, microsoft, windows, vulnérabilité, network, google, vulnerability, hacker, attack, inject, remote, mobile, server

+ de mots clés pour la revue de presse
Annuaires des videos : virus, spyware, vmware, firmware, biometric, lockpicking, wimax, password, kernel, malware, spammer, windows, iphone

+ de mots clés pour les videos

Dernier articles de SecuObs :
- Une vulnérabilité dans la pile TCP/IP des systèmes d'exploitation Microsoft Windows Vista
- Un système d’exploitation certifié EAL 6 commercialisé pour le secteur privé
- BotHunter une solution pour la détection des flux malveillants
- Netwitness Investigator, un outil de monitoring sous stéroïdes
- RepRap un projet Opensource de constructeur universel et de système de prototypage
- Des vulnérabilités découvertes dans plusieurs applications de gestion des flux VoIP
- IKAT un outil d'audit pour les terminaux des kiosques Internet
- Vxclass ou la classification de codes malveillants par isomorphisme graphique
- Des publicités Google Adsense pour le malware Antivirus XP 2008
- Des probabilités de visualisation des données en clair lors des connexions SSH

Top des articles de SecuObs
- WPA TKIP aurait été partiellement cassé
- Collecte d’informations et social engineering via les réseaux sociaux
- [Sécuriser un réseau sans fil - Partie 1] Introduction à la sécurité du WI-FI
- Rustock.C, un rootkit robuste
- Une nouvelle faille RPC dans les systèmes Windows

Top de la revue de presse
- 15 minutes pour casser une clé WPA TKIP
- Un logiciel pour dupliquer des clés à  distance
- Avis du CERTA : Bulletin d'actualité numéro 045 de l'année 2008
- scapy vs hping3 : spectrographe de distribution ISN
- VIPeers, un combiné Rapidshare et Bittorrent

Top de l'annuaire des videos
- metasploit 3 autopwn
- Fallout 3 Lockpicking tutorial
- HACK WINDOWS XP PASSWORD
- SSH into your iPod Touch/iPhone via USB on Windows!
- How to Remove Antivirus 2009 | Antivirus2009 Removal Guide

Revue de presse internationale :
- Microsoft dissed chipset before 'Vista Capable' changes
- Researchers find vulnerability in Windows Vista
- Firewall Testing Methodology & Webinar
- The Case of the Insecure Security Software
- The Case of the Unexpected PsList Error
- The Case of the Failed File Compression
- Vista Multimedia Playback and Network Throughput
- The Case of the Failed File Copy
- The Case of the Frozen Clock Gadget
- The Case of the Missing AutoPlay

Dernières brèves de SecuObs :
- Licence Checkpoint Zone Alarm Pro gratuite pour un an le 18 novembre 2008
- Version 3.0 du CD de secours F-Secure
- Appel de la dernière chance pour Gary McKinnon
- 20% de remise sur les certificats SSL VeriSign jusqu'au 31 mai 2008
- Vol de données à Harvard

Annuaire des videos
- whax
- Antispyware Adware Remover
- Demo 07: Ceelox, Inc. Scram
- Kirlian Camera Kaczynski Code / edit by Hipnosis Italy
- PS3 Firmware Update Video

Commentaires sur SecuObs :
- An Ad for DDoS Services - Network, Phone, Competition http://www
- How-to: The Bus Pirate, universal serial interface http://www.se
- FREE 1 Year BitDefender Antivirus 2009 Genuine License for EVERY
- Metasploit Framework 3.2 Released https://www.secuobs.com/secuma
- GPCode Ransom Trojan Decoder http://www.securescience.net/home/

Exostats/Exoscan
Nombre de tests inclus
24271
Tests ajoutés
Aujourd'hui
Ce mois
10
309
Détail du test :
ID
20007
Nom
Deprecated SSL Protocol Usage
Auteurs
This script is Copyright (C) 2005-2007 Tenable Network Security
Catégorie
General
Action
infos
Résumé
Checks for use of a deprecated SSL protocol
Description
Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See also : http://www.schneier.com/paper-ssl.pdf Solution : Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk factor : Medium / CVSS Base Score : 5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)


Cliquer pour le detail - Liste des tests :
Predictable TCP sequence number
Linksys Router Default Password
OS Identification : MSRPC
Unprotected PC Anywhere Service
Unprotected Netware Management Portal
SSL Certificate Expiry
PowerDNS recursor cache poisoning
Supported SSL Ciphers Suites
Linux Distribution Detection
HTTP version spoken
NetCharts Server Default Password
Enable local security checks
Usable remote name server
DNS Cache Snooping
SSH protocol versions supported
RiSearch OpenProxy
CVS file existence information disclosure weakness
NTP read variables
SWAT allows user names to be obtained by brute force
Unconfigured web server
Version of BIND
Sun JavaServer Default Admin Password
CheckPoint InterSpect
Kerberos 5 issues
Enumerate IPv6 interfaces via SSH
ntpd Incorrect Group Privileges Vulnerability
Compaq Web-based Management Login
SHOUTcast Server logfiles XSS
TCP timestamps
SSL Certificate
Unreal Tournament Server Detection
CVS server piped checkout access validation
OS Identification : SNMP
DHCP server info gathering
CVS pserver CVSROOT passwd file cmd exec
Determine if Bind 9 is running
ICMP domain name request
Information about the scan
OS Identification : SinFP
OS Identification : HTTP
Netscape Enterprise Server default files
iPlanet Application Server Detection
DNS Server Fingerprint
Compaq Web Based Management Agent Proxy Vulnerability
CVS malformed entry lines flaw
Unsupported Linux / Unix Operating System
HP Integrated Lights-Out Detection
X-Micro Router Default Password
Knox Arkeia Network Backup Agent Unauthorized Access
SPF Enabled
Private IP address leaked in HTTP headers
OS Identification : Linux Distribution
BIND UDP Client Handler Remote DoS
DNS Server Detection
Kerberos IV cryptographic weaknesses
CVS Multiple Unspecified Vulnerabilities
IRCXPro Default Admin password
OS Identification : telnet banner
The remote BIND has dynamic updates enabled
LLTD Detection
SHOUTcast Server User-Agent / Host Header Denial of Service Vulnerability
Public CVS pserver
Obtain /etc/passwd using NetInfo
DNS Server on UDP and TCP
SCO OpenServer multiple vulnerabilities
SSF Detection
IlohaMail Detection
Get the IMAP Banner
TFTP directory permissions (HP Ignite-UX)
TFTP file detection (Cisco CallManager)
602LAN SUITE Open Telnet Proxy
OS Identification : uname
NetOp products information disclosure
PHP-Nuke sql_debug Information Disclosure
UDDI detection
OS Identification : NTP
Local Checks Failed
WhatsUp Gold Default Admin Account
HP Jet Admin 7.0 or less Vulnerability
OS Identification : mDNS
Dropbear SSH server format string vulnerability
CVS pserver double free() bug
F5 Device Default Support Password
clarkconnectd detection
Enhydra Multiserver Default Password
HP Jet Admin 7.x Directory Traversal
BIND vulnerable to DNS storm
Deprecated SSL Protocol Usage
AFS client version
IRC daemon identification
Open News server
NetGear Router Default Password
Brightmail Control Center Default Account/Password
OS Identification
Access Point detection
cfengine detection and local identification
CVS pserver dir create bug
Leafnode denials of service
OS Identification : SSH
Cisco IDS Device Manager Detection
Netscape Enterprise Default Administrative Password
Misc information on News server
HMAP
Version of PowerDNS
PowerDNS malformed query handling
Intel System Management Mode Local Privilege Escalation Vulnerability
CVS pserver heap overflow
BIOS version (SSH)
Enumerate MAC addresses via SSH
Host FQDN
Network Chemistry Wireless Sensor Detection
Standard & Poors detection
BrightStor ARCserve/Enterprise Backup Default Account Vulnerability
McAfee IntruShield management console
IDA Pro Detection
Weak Supported SSL Ciphers Suites
S-HTTP detection
OpenFTPD Detection
OS Identification : ICMP
Remote DNS Resolver Uses Non-Random Ports
TCP sequence number approximation
TFTP file detection (HP Ignite-UX passwd)
TFTP file detection (Cisco IOS CA)
MikroTik RouterOS Detection
Tripwire for Webpages Information Disclosure Vulnerability
HTTP Server type and version
DNS AXFR
SSH protocol version 1 enabled
OS Identification : SMB
Anonymous SSL Ciphers Suites Supported
TFTP file detection (HP Ignite-UX)
Google Search Appliance Detection
Enumerate IPv4 interfaces via SSH


Mini-Tagwall des articles publiés sur SecuObs :

Archives Failles Secunia :
- SA32774 Citrix XenServer Ext2/Ext3 Processing Security Bypass Vulnerability
- SA32761 No-IP Linux Dynamic Update Client Buffer Overflow Vulnerability
- SA32778 Ubuntu update for firefox, firefox-3.0, and xulrunner-1.9
- SA32659 E-topbiz Link Back Checker auth Cookie Security Bypass
- SA32745 Free Directory Script API_HOME_DIR File Inclusion Vulnerability

Archives Mailing Full Disclosure :
- Re: Full-disclosure Fwd: Three London hospitals have been forced to shut down their entire computer systems for at least 24 hours after being hit by a virus
- Re: Full-disclosure Fredrick Diggle Security is looking for a few good men (or mediocre women)
- Re: Full-disclosure Fwd: Three London hospitals have been forced to shut down their entire computer systems for at least 24 hours after being hit by a virus
- Re: Full-disclosure Fwd: Three London hospitals have been forced to shut down their entire computer systems for at least 24 hours after being hit by a virus
- Full-disclosure MDVSA-2008:220-1 kernel

Archives Mailing Bugtraq :
- MDVSA-2008:220-1 kernel
- Re: Re: Re: Re: Opera 9.6x file:// overflow
- Re: MDVSA-2008:232 dovecot
- Re: Re: Re: Re: Opera 9.6x file:// overflow
- MDVSA-2008:232 dovecot

Mini-Tagwall de l'annuaire video :

Mini-Tagwall des articles de la revue de presse :