Security Assessment | Topgallant Partners

Subscribe via RSS

Available Downloads from Topgallant
- Risk Analysis White Paper
- Meaningful Use Security Rule vs HIPAA Compliance
Microsoft Updates
- Summary for January 2012 - Version: 2.1 January 27, 2012 12:00 am
  Revision Note: V2.1 (January 27, 2012): For MS12-004, corrected the aggregate severity rating for the KB2631813 update package for all supported editions of Windows XP, Windows Server 2003, Windows Vi […]
- MS12-004 - Critical : Vulnerabilities in Windows Media Could Allow Remote Code Execution (2636391) - Version: 1.2 January 27, 2012 12:00 am
  Severity Rating: Critical Revision Note: V1.2 (January 27, 2012): Corrected the aggregate severity rating for the KB2631813 update package in the Affected Software table for all supported editions of […]
- MS11-025 - Important : Vulnerability in Microsoft Foundation Class (MFC) Library Could Allow Remote Code Execution (2500212) - Version: 4.2 January 24, 2012 12:00 am
  Severity Rating: Important Revision Note: V4.2 (January 24, 2012): Added an entry to the update FAQ to announce a detection change for KB2538242, KB2538243, KB2467173, KB2538218, KB2538241, and KB2542 […]
- MS11-049 - Important : Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893) - Version: 2.3 January 24, 2012 12:00 am
  Severity Rating: Important Revision Note: V2.3 (January 24, 2012): Added an entry to the update FAQ to announce a detection change for KB2251481, KB2251487, and KB2251489 to correct an installation is […]
Ubuntu Security Advisory
- USN-1349-1: X.Org vulnerability
  Ubuntu Security Notice USN-1349-1 26th January, 2012 xorg vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.10 Ubuntu 10.04 LTS S […]
- USN-1348-1: ICU vulnerability
  Ubuntu Security Notice USN-1348-1 26th January, 2012 icu vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.10 Ubuntu 10.04 LTS Su […]
- USN-1342-1: Linux kernel (Oneiric backport) vulnerability
  Ubuntu Security Notice USN-1342-1 25th January, 2012 linux-lts-backport-oneiric vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 10.04 LTS Summary The system […]
- USN-1347-1: Evince vulnerability
  Ubuntu Security Notice USN-1347-1 25th January, 2012 evince vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 11.04 Ubuntu 10.10 Ubuntu 10.04 LTS Summary Evin […]

Connect with Topgallant Partners
Connect on Linkedin Follow us on Twitter
National Cyber Security Database
- CVE-2012-0053 January 27, 2012
  protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to o […]
- CVE-2012-0021 January 27, 2012
  The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server 2.2.17 through 2.2.21, when a threaded MPM is used, does not properly handle a %{}C format string, wh […]
- CVE-2011-4325 January 27, 2012
  The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer derefer […]
- CVE-2012-0931 January 27, 2012
  Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code […]
- CVE-2011-1162 January 27, 2012
  The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command. […]
- CVE-2012-0930 January 27, 2012
  Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. […]
- CVE-2011-4132 January 27, 2012
  The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ex […]
- CVE-2012-0929 January 27, 2012
  Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server. […]
- CVE-2011-3626 January 27, 2012
  Double free vulnerability in the prepare_exec function in src/exec.c in Logsurfer 1.5b and earlier, and Logsurfer+ 1.7 and earlier, allows remote attackers to execute arbitrary commands via crafted st […]
- CVE-2012-0814 January 27, 2012
  The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain po […]
Google Meaningful Use News
- Health department promotes Yellow Dot program - Freeport Journal-Standard January 28, 2012 2:16 am
- AMA to House Speaker Boehner: Stop ICD-10 - CMIO January 27, 2012 10:06 pm
- Bipartisan center calls for increased HIE efforts, alignment of healthcare ... - FierceHealthIT January 27, 2012 6:18 pm
- Paperless Solution to Help HR Professionals Address HIPAA Requirements - PR Web (press release) January 27, 2012 9:13 am