----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
ToutVirtual VirtualIQ Pro Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA37297

VERIFY ADVISORY:
http://secunia.com/advisories/37297/

DESCRIPTION:
A security issue and some vulnerabilities have been reported in
ToutVirtual VirtualIQ Pro, which can be exploited by malicious people
to disclose potentially sensitive information or compromise a
vulnerable system.

1) Some vulnerabilities in Tomcat can be exploited by malicious
people to disclose sensitive information.

For more information see vulnerability #3 in:
SA31379

2) A security issue exists due to access to the JMX Console and Web
Console in the included JBoss web application server is not properly
restricted. This can be exploited to e.g. execute arbitrary shell
commands.

The security issue and the vulnerabilities are reported in version
3.2 build 7882. Other versions may also be affected.

SOLUTION:
Update to version 3.5 build 8691.

PROVIDED AND/OR DISCOVERED BY:
Alberto Trivero and Claudio Criscione, Secure Network S.r.l.

ORIGINAL ADVISORY:
http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt

OTHER REFERENCES:
SA31379:
http://secunia.com/advisories/31379/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------