search for: vulnerabilties

...y blocking out netbios UDP port 137 on my firewall and was wondering what the following means in terms of security: Jul 9 16:19:05 oscar kernel: IP fw-in rej eth0 UDP SOMEONES_IP:137 MY_IP:137 L=78 S=0x00 I=46484 F=0x0000 T=111 I have gottena few 100 of these and was wondering if there are some vulnerabilties related to netbios out there?? What do the S/I/F/L fields stand for?? I assume T= TOS? Thanks for any info I would appreciate any info/URL's now. Is there a way to tell tcpdump to dump all netbios packets originating from outside my present class C to a file for future viewing?? Thanks again I...

Puppet 3.2.4 is now available. 3.2.4 addresses two security vulnerabilties discovered in the 3.x series of Puppet. These vulnerabilities have been assigned Mitre CVE numbers CVE-2013-4956 and CVE-2013-4761. All users of Puppet 3.2.3 and earlier are strongly encouraged to upgrade to 3.2.4. For more information on these vulnerabilities, please visit http://puppetlabs.com/...

Hi, A bit off-topic, but I''m about to set up a remote Linux server for Rails, with postgres and probably Lighttpd. The server has two 120GB hard drives, one of which will just be for nightly backups of the other. I don''t intend to have any untrusted user accounts on the server. The server will be dedicated to my own applications. I''ll want to support lots of www

Does anyone know off hand what the longest known serious security issue (i.e. remote compromise) has been with FreeBSD that went unpatched ? e.g. security hole is reported to security-officer@FreeBSD.org. X days later, fix and advisory committed. What has been the largest X ? My jaw dropped when I saw http://www.eeye.com/html/Research/Upcoming/index.html ---Mike

https://bugzilla.mindrot.org/show_bug.cgi?id=2765 Bug ID: 2765 Summary: ssh-copy-id appears to hang indefinitely when the target user has no password Product: Portable OpenSSH Version: 6.6p1 Hardware: All OS: Linux Status: NEW Severity: trivial Priority: P5

[Mod: This message is a reason *why* linux-security is moderated list. This is also a reason why Rogier, myself, Alan Cox and others really do not want to have completely open lists that deal with security related aspects of running a system as way too many people just jump to conclusions and give suggestions without doing any reasearch on a subject. -- alex (co-moderator of