-
A design flaw – The CVE dictionary entry submitted on 2018 (cve-2018-10239), vendor official announcement of the first publication on May 13, 2019.
Preface: You can still find the default username and password on your computer today! Coincidentally, they share common characteristics. They have super user capabilities. Synopsis: Infoblox delivers essential technology to enable customers to manage, control and optimize DNS, DHCP, IPAM . Vulnerability Details: A privilege escalation vulnerability in the “support access” feature on Infoblox NIOS…
-
Country to country APT attack mechanism not complex, believe that it exploit design flaw instead of backdoor – Jun 2019
Preface: It was the best of times, it was the worst of times, it was the age of wisdom, it was the age of foolishness, … Synopsis: Mongoose is a cross-platform embedded web server and networking library with functions including different protocol (TCP, HTTP, WebSocket, Server MQTT client and broker). Since the footprint is small…
-
Microsoft Exchange server 2013 and new version of product are vulnerable to NTLM relay attacks (2019)
Preface: A privilege escalation is possible from the Exchange Windows permissions (EWP) security group to compromise the entire prepared Active Directory domain. Vulnerability details: A tool capable for performing ntlm relay attacks on Exchange Web Services (EWS). It spawns an SMBListener on port 445 and an HTTP Listener on port 80, waiting for incoming connection…
-
Linux world worries! CVE-2019-11477 TCP SACK PANIC – Kernel vulnerability (Jun 2019)
Preface: Router, SD-WAN,Load-balancer, Firewall and IDS and virtual machine. Their operations are based on Linux operation system. Background: A Selective Acknowledgment (SACK) mechanism, combined with a selective repeat retransmission policy, can help to overcome these limitations. The receiving TCP sends back SACK packets to the sender informing the sender of data that has been received.…
-
CVE-2019-1625 Cisco SD-WAN Solution Privilege Escalation Vulnerability – Jun 2019
Preface: Add the Viptela SD-WAN technology to the IOS XE software running the ISR/ASR routers. Both Cisco ASR and ISR routers offer secure WAN connectivity. Vulnerability details: A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. Root…
-
CVE-2019-4103 IBM Tivoli Netcool Impact Arbitrary Command Execution Vulnerability – Jun 2019
Preface – You never know what will be happened tomorrow. Synopsis: A vulnerability in IBM Tivoli Netcool Impact could allow an authenticated, adjacent attacker to execute arbitrary commands on a targeted system. Vulnerability details: A vulnerability in IBM Tivoli Netcool Impact could allow an authenticated, adjacent attacker to execute arbitrary commands on a targeted system.At…
-
It is hard to judge it was a self defense or attack. New York Times cyber attack news – 16th Jun 2019
-
Vulnerability might jeopardize IoT world – CVE-2019-10160 Python Security Regression Unicode Encoding Vulnerability (Jun 2019)
Preface: IoT device similar a delivery arm of robotic concept. They are the python language heavy duty users. Python language married with IoT devices – For IoT, there has been a variant of python called Micropython , that lets you program for IoT in Python. Additionally, developer can use Raspberry Pi to program your IoT…
-
It will jeopardizing 400,000 Linux system in the world – Exim Releases Security Patches (alert issued in Jun 2019)
Preface: Exim is growing in popularity because it is open source. Background:It’s the default mail transport agent installed on some Linux systems.It contain feature likes: Lookups in LDAP servers, MySQL and PostgreSQL databases, and NIS or NIS+ services. Vulnerability details: The vulnerability was patched in Exim 4.92, released on February 10, 2019. The vulnerable code…
-
CVE-2019-3567 osquery design flaw – unintended create hidden place for malware Jun 2019
Preface: Need to know what processes are running on a given machine? A servers current CPU temperature? Verify a hard drive is encrypted? OSQUERY can do, even though security monitoring. Technical background: osquery is a tool that exposes an operating system as a high-performance relational database.The design founded by Facebook. It enables developers to write…