|
|
|
Cenzic SmartAttack Software Updates |
Si vous voulez bloquer ce service sur vos fils RSS
Si vous voulez nous contacter ou nous proposer un fil RSS
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Présentation : Cenzic includes software patches along with its weekly SmartAttack product update This October 16 weekly product update includes an additional software patch with the SmartAttack update. This list below outlines the software patch details made to the test engine browser component of Cenzic Hailstorm Improved support for hidden form fields in Proxy IE traversals Improved reliability when using Proxy IE traversals Automatic scrolling on the browser window to show CAPTCHA image when prompting for CAPTCHA value Improved support for binary and octet-stream POST data Fixed problem which could result in a duplicated HTTP Content-type header Fixed problem which could cause an excessively large HTTP response to cause the assessment to end prematurely Improved spidering on pages containing SWF content Fixed problem where domain server of starting URL was incorrect when a Proxy Auto Configuration file was being used Fixed problem in Proxy IE traversals if certain HTTP headers such as Content-type were not of the expected case eg. content-type Fixed problem which could cause some pages in an IE traversal to not load or behave correctly Fixed problem which could cause an occasional crash of the Mozilla browser component Cenzic SmartAttack Update Cenzic now detects an Apache HTTP Server Solaris Event Port Pollset Support Remote Denial Of Service Vulnerability BugtraqID 36596 . The Apache HTTP Server is prone to a denial-of-service vulnerability because of faulty error handling. Successful exploits may allow remote attackers to trigger denial-of-service conditions. Apache versions 2.2.0 to 2.2.13 are affected. Background on Cenzic s SmartAttacks Every week, Cenzic s suite of products is updated with the latest vulnerabilities custom, commercial, and open-source to better detect holes in Web applications. These Web application vulnerabilities include but not limited to cross site scripting, buffer overflow, path or directory traversal, SQL injection, HTTP response splitting, and other workflow types. by Erin Swanson Eswanson cenzic.com See Also Apache HTTP Server Solaris Event Port Pollset Support Remote Denial Of Service Vulnerability Learn more about this vulnerability on Security Focus
Les derniers articles du site "What's New Cenzic Security Blog" :
- ISC2 Security Leadership Event
- Cyber Security Predictions for the Next Decade
- Cenzic Detects an Apache Integer Overflow Vulnerability
- SANS Application Security 2010 Conference
- 2010 Cyber Security Expo
- Cenzic Detects 3 Apache Tomcat Vulnerabilities
- OWASP, Risk, the Adult Film Industry
- Adam Meyers, Sr Cyber Security Engineer at SRA International Featured on Application Security MythBusters Series
- Web Application Security Press for Cenzic
- Cost of a Data Breach 2010 Ponemon Report
Menu > Articles de la revue de presse : - l'ensemble [ tous | francophone] - par mots clé [ tous] - par site [ tous] - le tagwall [ voir] - Top bi-hebdo de la revue de presse [ Voir]
Si vous voulez bloquer ce service sur vos fils RSS :
- avec iptables "iptables -A INPUT -s 88.191.75.173 --dport 80 -j DROP"
- avec ipfw et wipfw "ipfw add deny from 88.191.75.173 to any 80"
- Nous contacter par mail
| Mini-Tagwall des articles publiés sur SecuObs : | | | | sécurité, exploit, windows, microsoft, réseau, attaque, vulnérabilité, outil, système, audit, virus, internet, données, présentation, linux, metasploit, protocol, bluetooth, vista, shell, scanner, réseaux, rootkit, paquet, trames, source, conférence, téléphone, wishmaster, noyau, engineering, mobile, sysun, https, téléphones, mémoire, patch, intel, botnet, libre, rapport, scapy, reverse, contourner, securitech |
| Mini-Tagwall de l'annuaire video : | | | | vmware, security, virus, biometric, windows, lockpicking, password, metasploit, botnet, tutorial, crypt, attack, linux, network, iphone, server, exploit, wimax, conficker, virtu, virtual, engineering, cisco, reverse, ettercap, wireshark, hacker, firewall, knoppix, arduino, internet, rootkit, wireless, source, brucon, backtrack, openbsd, systm, overflow, openssh, conference, buffer, access, remote, defcon |
| Mini-Tagwall des articles de la revue de presse : | | | | security, microsoft, windows, hacker, attack, network, vulnerability, google, exploit, malware, internet, remote, iphone, server, inject, patch, apple, twitter, mobile, virus, ebook, facebook, vulnérabilité, crypt, source, linux, password, intel, research, virtual, phish, access, tutorial, trojan, social, privacy, firefox, adobe, overflow, office, cisco, conficker, botnet, pirate, sécurité |
| Mini-Tagwall des Tweets de la revue Twitter : | | | | security, linux, botnet, attack, metasploit, cisco, defcon, phish, exploit, google, inject, server, firewall, network, twitter, vmware, windows, microsoft, compliance, vulnerability, python, engineering, source, kernel, crypt, social, overflow, nessus, crack, hacker, virus, iphone, patch, virtual, javascript, malware, conficker, pentest, research, email, password, adobe, apache, proxy, backtrack |
|
|
|
|
|
