Month: febrero 2018

Red Hat Enterprise Linux: An update for kernel is now available for Red Hat Enterprise Linux 5 ExtendedLifecycle Support.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 More info: http://rhn.redhat.com/errata/RHSA-2018-0292.html

Type: Vulnerability. Adobe Flash Player is prone to an unspecified remote code-execution vulnerability; fixes are available. More info: http://www.symantec.com/security_response/vulnerability.jsp?bid=102930&om_rssid=sr-advisories

CRIME vulnerability via TLS 1.2 protocol CVE-2012-4929. Security Advisory. Security Advisory Description. The TLS protocol ... More info: https://support.f5.com/csp/article/K14054

Calum Hutton and the Mailman team discovered a cross site scripting andinformation leak vulnerability in the user options page. A remoteattacker could use a crafted URL to steal cookie information or tofish for whether a user is subscribed to a list with a private roster. More info: https://www.debian.org/security/2018/dsa-4108

More info: https://wpvulndb.com/vulnerabilities/9024

Type: Vulnerability. Microsoft Internet Information Services is prone to a security-bypass vulnerability; fixes are available. More info: http://www.symantec.com/security_response/vulnerability.jsp?bid=70937&om_rssid=sr-advisories

Type: Vulnerability. Microsoft Internet Information Services is prone to a security-bypass vulnerability; fixes are available. More info: http://www.symantec.com/security_response/vulnerability.jsp?bid=70937&om_rssid=sr-advisories

Red Hat Enterprise Linux: An update for kernel is now available for Red Hat Enterprise Linux 5 ExtendedLifecycle Support.Red Hat Product Security has rated this update as having a security impact ofImportant. A Common Vulnerability Scoring System (CVSS) base score, which givesa detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 More info: http://rhn.redhat.com/errata/RHSA-2018-0292.html

Una herramienta de piratería informática que permite a los ciberdelincuentes controlar de forma remota el ordenador de una víctima ya no está disponible como resultado de una operación dirigida por el Reino Unido contra los hackers vinculados al Remote Access Trojan (RAT) Luminosity Link. Coordinada por la Agencia Nacional de Lucha contra la Delincuencia del Reino Unido con el apoyo de Europol, esta operación contó con la participación de más de una docena de organismos policiales en Europa, Australia y América del Norte.

El Centro Europeo de la Ciberdelincuencia de Europol (EC3) apoyó a los países en sus esfuerzos por identificar a los ciudadanos de la UE proporcionando apoyo analítico y facilitando el intercambio de información en el marco del Grupo de trabajo conjunto sobre la ciberdelincuencia, que tiene su sede en la sede de Europol en La Haya.

[CCN-CERT 05/02/2018]

Más información:

EUROPOL