Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : ntp vulnerability (USN-705-1)

It was discovered that NTP did not properly perform signature verification. A remote attacker could exploit this to bypass certificate validation via a malformed SSL/TLS signature. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Ubuntu: Security Advisory (USN-598-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for cups RHSA-2008:0192-01

Check for the Version of cups OpenVAS Vulnerability Test RedHat Update for cups RHSA-2008:0192-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for cups FEDORA-2008-3586

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-3586 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cups FEDORA-2008-8801

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-8801 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cups FEDORA-2008-2897

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2008-2897 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for cups FEDORA-2008-2131

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2009-0047

Gale 0.99 and earlier does not properly check the return value from the OpenSSL EVPVerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077...

CVE-2009-0047

CVE-2009-0047 affects Gale 0.99 and earlier due to improper checking of the OpenSSL EVP_VerifyFinal return value, allowing a remote attacker to bypass certificate-chain validation via a malformed SSL/TLS signature for DSA/ECDSA keys. The root cause is the same class of issue described in CVE-2008...

Gentoo Security Advisory GLSA 200603-11 (freeciv)

The remote host is missing updates announced in advisory GLSA 200603-11. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: freeciv, freeciv-gtk, freeciv-gtk2, freeciv-nox11

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 8 : cups-1.3.7-2.fc8 (2008-3586)

Fri May 9 2008 Tim Waugh 1:1.3.7-2 - Applied patch to fix CVE-2008-1722 integer overflow in image filter, bug 441692, STR 2790. - Fri May 2 2008 Tim Waugh - Include the hostname in the charset error part of bug 441719. - Thu Apr 10 2008 Tim Waugh - Log an error when a client requests a charset...

Fedora 7 : cups-1.2.12-10.fc7 (2008-2897)

Three security issues have been fixed in this update: A buffer overflow when processing GIF files A heap-based overflow in a CUPS helper program, used for searching documentation A buffer overflow when processing HP-GL/2 files Note that Tenable Network Security has extracted the preceding...

[USN-598-1] CUPS vulnerabilities

=========================================================== Ubuntu Security Notice USN-598-1 April 02, 2008 cupsys vulnerabilities CVE-2008-0047, CVE-2008-0053, CVE-2008-0882, CVE-2008-1373 =========================================================== A security issue affects the following Ubuntu...

cups security update

cups 1.2.4-11.14:.6 - Applied patch to fix CVE-2008-0053 HP-GL/2 input processing, bug 438117. - Applied patch to fix CVE-2008-1373 GIF overflow, bug 438303. 1.2.4-11.14:.5 - Applied patch to prevent heap-based buffer overflow in CUPS helper program bug 436153, CVE-2008-0047, STR 2729...

[SECURITY] [DSA 1530-1] New cupsys packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1530-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 25, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1530-1] New cupsys packages fix multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1530-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 25, 2008 http://www.debian.org/security/faq -...

openSUSE 10 Security Update : cups (cups-5076)

This update of cups fixes a heap-overflow in cgiCompileSearch that can be abused to execute arbitrary code remotely. CVE-2008-0047 This bug can only be exploited if the web-interface 631/TCP is enabled and the CGI scripts use the affected function. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2008-0047

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions...

CVE-2008-0047

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions...