-
Juniper harden itself. Avoid log event services daemon encountered injection attack – 28th Apr 2020
Preface: Friendly speaking, the similar types of attack apply to all Linux base devices including firewall. The impact of this vulnerability – If J-Web is enabled, the attacker could gain the same level of access of anyone actively logged into J-Web. If an administrator is logged in, the attacker could gain administrator access to J-Web.…
-
An Official remediation was released (Avoid SQL injection attack encountered in Sophos XG Firewall) – 26th April 2020.
Preface: The modern user friendly functions installed on firewall impact his defense function. Background: When device provide web page input user credential, perhaps it will facing injection attack. Yes, it is. No matter, SQL injection or command injection. Especially like firewall design. It is capable support and integrate of LDAP authentication or standalone authentication mode.…
-
headline news – cyber attackers from exploiting web servers via web shell malware. 23rd Apr 2020
Preface: Web shells are a well-known attacker technique, but they are often difficult to detect because of their proficiency in blending in with an existing web application. Details: to gain root access to server. Web shells malware are frequently chosen by APT group; however these are just a small number of known used web shells.…
-
Cisco security advisory – Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (17-Apr-2020)
Preface: The protocols and the interfaces used by the controller to communicate with the application layer are called the Northbound interface. Protocols used for communication between the controller and forwarding nodes are called Southbound interface. Northbound communication is used to retrieve info or send instructions to the controller using APIs. Vulnerability details: Multiple vulnerabilities in…
-
Security Focus – April 2020 (Oracle security alert – cve-2020-2959)
Preface: Perhaps you have similar feeling, everytime when you read the cyber security announcement by Oracle. The first impression is that it has too many. Read into details, some items let you know the remediation process is in long run! Vulnerability detail: An unspecified vulnerability in the Analystics Web General component of Oracle BI Published.…
-
Security Focus – intel modular server (mfs2600kispp) vulnerability – 14th Apr 2020
Preface: The Global Data Center Blade Server market is projected to grow at a CAGR of 8.35% during the forecast period, reaching a total market size of US$23.535 billion in 2025 from US$14.548 billion in 2019, said ResearchAndMarkets.com’s. Vulnerability details: • authenticated attackers to potentially enable escalation of privilege via local access due to improper buffer…
-
To infinity…and beyond! VMware vCenter Server updates address sensitive information disclosure vulnerability in the VMware Directory Service – CVE-2020-3952
Preface: VMware announce that the external Platform Services Controller architecture is deprecated and will not be available in future releases. Background: Authentication and certificate management is handled by the Platform Services Controller. See attached diagram, the platform services controller original design place in a standalone box. It is advice to put together ( a vCenter…
-
Security Focus – Juniper Networks (9th April 2020)
Preface: Technology cannot fight against coronavirus in the moment.Easter, commemorating the resurrection of Jesus from the dead.Wish that human can managed to fight it all. Comparing with coronavirus. The vulnerability in computer system looks easy resolve. Security focus – Juniper Network product: A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual…
-
CVE-2020-10808 Vesta Control Panel Authenticated Remote Code Execution 6th April 2020
Preface: Dockerized Vesta Control Panel aka vestacp. You can download vesta source code and modify it the way you want. You are totally free to do it so to Vesta is licensed under GPL Background: You are able to install and configure VestaCP on an Alibaba Cloud Elastic Compute Service (ECS) instance with CentOS 7…
-
Staying alert! – Mozilla Patches Critical Vulnerabilities in Firefox, Firefox ESR (3rd Apr 2020)
Preface: According on 2020 market statistic, FireFox market share only 9.25%. But Chrome has 68.11% coverage. However I like FireFox. How Firefox’s memory allocator works? Firefox uses a memory allocator called moz jemalloc. There are two properties which focus by cyber security expert so far! [PSJ] – In essence, a chunk is broken into several…