×

Home Top Podcaster Networks By Language By Country By Category About Us Contact Us Faqs Features News & Blogs Privacy Policy Terms Of Use

☰

Search

Home > Tenable Network Security Podcast > Tenable Network Security Podcast - Episode 125


	Podcast:		Tenable Network Security Podcast
	Episode:		Tenable Network Security Podcast - Episode 125
	Category:		Technology
	Duration:		00:00:00
	Publish Date:		2012-05-22 11:12:44
	Description:		Welcome to the Tenable Network Security Podcast Episode 125 Announcements New Nessus Feature Added: CSV Export Tenable Network Security Named Top ‘Cyber Warrior’ at Baltimore SmartCEO VOLT Awards Check out our video channel on YouTube which contains new Nessus and SecurityCenter 4 tutorials. We're hiring! - Visit the Tenable website for more information about open positions. You can subscribe to the Tenable Network Security Podcast on iTunes! Tenable Tweets - You can find us on Twitter at http://twitter.com/tenablesecurity where we make product and company announcements, provide Nessus plugin statistics, and more! Want to ask questions about Nessus, SecurityCenter, LCE, and PVS and get answers from the experts at Tenable? Join Tenable's Discussion Forum for custom scripts, announcements, and more! New & Notable Plugins Nessus QuickTime for Windows Versions prior to 7.7.2 Vulnerabilities - A long list of stack, heap and integer overflows in Quicktime is fixed with this set of patches for Quicktime running on Windows. I'm curious to see if there are exploits available and how modern protections against them will work, or not. SolarWinds Storage Manager Server LoginServlet SQL Injection - This is usually bad: '"he version of SolarWinds Storage Manager running on the remote host has a SQL injection vulnerability in the 'loginName' parameter of the 'LoginServlet' page." This typically means you do not need credentials to exploit the vulnerability, and access to the database via SQL injection can lead to shell access and the ability to download the data contained on the system. Pidgin OTR (Off-the-Record) Format String Vulnerability - I've used OTR for some time now to prevent attackers from snooping in on my IM conversations. It sounds like this could be exploited if you accepted a key from someone who was sending a malicious OTR key, thus triggering the format string vulnerability.
	Total Play:		0