jetlib.sec » Tags » protection-mechanisms

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

7 items tagged "protection mechanisms"

Related tags: thunderbird [+], rapid evolution [+], object element [+], mozilla [+], lifting [+], intranet web servers [+], fog [+], firefox [+], data execution prevention [+], data [+], cloud model [+], cloud [+], aslr [+], abu dhabi [+], usa [+], protection [+], prevention [+], mobile os [+], marco slaviero [+], ios [+], execution [+], dmitry sklyarov [+]

• February 01, 2012
• 21:41

  [Slides] Evolution of iOS Data Protection and iPhone Forensics: from iPhoneOS to iOS 5

   » ‎ SecDocs
  Authors: Andrey Belenko Dmitry Sklyarov
  Tags: forensic iPhone
  Event: Black Hat Abu Dhabi 2011
  Abstract: iOS 5 is the latest and most advanced mobile OS from Apple. Besides tweaking UI and UX, Apple has made some changes to Data Protection mechanisms that were introduced in iOS 4. Those changes provide better security for users, but they also impose additional hurdles for mobile phone forensic process. This talk will provide detailed discussion of iOS Data Protection, focusing on both technical description of defenses and on circumventing certain protections to provide forensic access to the data stored on the iOS devices. iOS versions from iOS 3 (iPhoneOS 3) to iOS 5 will be covered.

  Tags:  ios protection data abu-dhabi dmitry-sklyarov protection-mechanisms mobile-os  

• September 27, 2011
• 11:52

  [Slides] Lifting the Fog

   » ‎ SecDocs
  Authors: Marco Slaviero
  Tags: database cloud computing
  Event: Black Hat USA 2010
  Abstract: Cloud services continue to proliferate and new users continue to flock, in a clear demonstration that cloud computing is more than simply a flash-in-the-pan. Coupled with this rapid evolution of services are protection mechanisms for the services, which often lag. Last year we highlighted weaknesses in the cloud model and demonstrated a number of vulnerabilities in large cloud providers. In this talk, we examine a particular technology underlying the scalability of many cloud applications, namely memcached. We discuss the possibility of memcached mining which would be a natural exploitation path once a vulnerability inside a cloud application is discovered and will demonstrate this with a new tool aimed at discovering and mining memcached servers.

  Tags:  fog lifting cloud marco-slaviero usa protection-mechanisms rapid-evolution cloud-model  

• July 05, 2011
• 7:52

  Defeating Data Execution Prevention And ASLR In Windows XP SP3

   » ‎ Packet Storm Security Recent Files
  Whitepaper called Defeating Data Execution Prevention and ASLR in Windows XP SP3. Data prevention Execution (DEP) and Address space layout randomization (ASLR) are two protection mechanisms integrated in Windows operating system to make more complicated the task of exploiting software. This document show how these two features can be bypassed using different techniques.

  Tags:  prevention data execution data-execution-prevention aslr protection-mechanisms  

• 7:52

  Defeating Data Execution Prevention And ASLR In Windows XP SP3

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called Defeating Data Execution Prevention and ASLR in Windows XP SP3. Data prevention Execution (DEP) and Address space layout randomization (ASLR) are two protection mechanisms integrated in Windows operating system to make more complicated the task of exploiting software. This document show how these two features can be bypassed using different techniques.

  Tags:  data-execution-prevention aslr protection-mechanisms  

• April 18, 2011
• 14:27

  [Slides] Lifting the Fog

   » ‎ SecDocs
  Tags: web cloud computing memcached
  Event: Black Hat Abu Dhabi 2010
  Abstract: Cloud services continue to proliferate and new users continue to flock, in a clear demonstration that cloud computing is more than simply a flash-in-the-pan. Coupled with this rapid evolution of services are protection mechanisms for the services, which often lag. Last year we highlighted weaknesses in the cloud model and demonstrated a number of vulnerabilities in large cloud providers. In this talk, we examine a particular technology underlying the scalability of many cloud applications, namely memcached. We discuss the possibility of memcached mining which would be a natural exploitation path once a vulnerability inside a cloud application is discovered and will demonstrate this with a new tool aimed at discovering and mining memcached servers.

  Tags:  fog lifting cloud abu-dhabi protection-mechanisms rapid-evolution cloud-model  

• September 11, 2010
• 13:01

  MDVSA-2010-173.txt

   » ‎ Packet Storm Security Recent Files
  Mandriva Linux Security Advisory 2010-173 - Security issues were identified and fixed in firefox and mozilla-thinderbird. Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests. Cross-site scripting vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled. Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting protection mechanisms via UTF-7 encoding. Various other issues were addressed.

  Tags:  mozilla firefox thunderbird intranet-web-servers protection-mechanisms object-element  

• 13:00

  MDVSA-2010-173.txt

   » ‎ Packet Storm Security Advisories
  Mandriva Linux Security Advisory 2010-173 - Security issues were identified and fixed in firefox and mozilla-thinderbird. Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests. Cross-site scripting vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled. Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting protection mechanisms via UTF-7 encoding. Various other issues were addressed.

  Tags:  mozilla firefox thunderbird intranet-web-servers protection-mechanisms object-element