openSUSE Security Update : tgt (openSUSE-SU-2010:0608-1)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

Oracle Linux 6 : qemu-kvm (ELSA-2014-0743)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0743 advisory. 0.12.1.2-2.415.el65.10 - kvm-virtio-out-of-bounds-buffer-write-on-invalid-state-l.patch bz1095692 -...

CVE-2014-0743

The Certificate Authority Proxy Function CAPF component in Cisco Unified Communications Manager Unified CM 10.01 and earlier allows remote attackers to bypass authentication and modify registered-device information via crafted data, aka Bug ID CSCum95468...

CVE-2014-0743

The CVE-2014-0743 entry describes a Cisco CAPF (Certificate Authority Proxy Function) flaw in Cisco Unified Communications Manager, affecting CAPF in 10.0(1) and earlier. Root cause: insufficient authentication enforcement in CAPF allows remote attackers to bypass authentication and modify inform...

Mandriva Linux Security Advisory : nss (MDVSA-2013:050)

Google reported to Mozilla that TURKTRUST, a certificate authority in Mozillas root program, had mis-issued two intermediate certificates to customers. The issue was not specific to Firefox but there was evidence that one of the certificates was used for man-in-the-middle MITM traffic management ...

Fedora 17 : seamonkey-2.15.1-1.fc17 (2013-1382)

Update to 2.15.1 Update to 2.15 Fixes CVE-2013-0743, CVE-2013-0744-0760, CVE-2013-0762, CVE-2013-0764, CVE-2013-0766-0770 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

nss, nss-util, and nspr security, bug fix, and enhancement update

nspr 4.9.2-0.1 - Retagging to ensure n-v-r is lower than the one for rhel-6.4 - Resolves: rhbz891661 - RFE Rebase nspr to 4.9.2 due to Firefox 17 ESR 4.9.2-1 - Resolves: rhbz891661 - RFE Rebase nspr to 4.9.2 due to Firefox 17 ESR nss 3.13.6-2.0.1.el63 - Added nss-vendor.patch to change vendor...

Fedora 18 : seamonkey-2.15.1-1.fc18 (2013-1442)

Update to 2.15.1 Update to 2.15 Fixes CVE-2013-0743, CVE-2013-0744-0760, CVE-2013-0762, CVE-2013-0764, CVE-2013-0766-0770 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

RHEL 5 : scsi-target-utils (RHSA-2010:0362)

An updated scsi-target-utils package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Mozilla Firefox 17.x <= 17 Multiple Vulnerabilities

Binary data 800108.prm...

Scientific Linux Security Update : scsi-target-utils on SL5.x i386/x86_64

A format string flaw was found in scsi-target-utils' tgtd daemon. A remote attacker could trigger this flaw by sending a carefully-crafted Internet Storage Name Service iSNS request, causing the tgtd daemon to crash. CVE-2010-0743 All running scsi-target-utils services must be restarted for the...

CentOS Update for kernel CESA-2012:0743 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for kernel RHSA-2012:0743-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RHEL 6 : kernel (RHSA-2012:0743)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0743 advisory. - kernel: drm: integer overflow in drmmodedirtyfbioctl CVE-2012-0044 - kernel: thp:splithugepage mapcount != pagemapcount BUGON CVE-2012-117...

CVE-2012-0743

CVE-2012-0743 affects IBM Tivoli Directory Server (ITDS/TDS) versions 6.3 and earlier. A crafted LDAP paged search request can crash the daemon, causing denial of service. IBM’s advisory notes the vulnerability is a crash/vector that does not indicate arbitrary code execution. Remediation provide...

SuSE 11.1 Security Update : iSCSI (SAT Patch Number 2879)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

SuSE 11 Security Update : iSCSI (SAT Patch Number 2878)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

SuSE 11 / 11.1 Security Update : tgt (SAT Patch Numbers 2958 / 2959)

This update of tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability CWE-134...

SuSE 10 Security Update : iscsitarget (ZYPP Patch Number 7109)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...

openSUSE Security Update : iscsitarget (openSUSE-SU-2010:0604-1)

This update of iscscitarget/tgt fixes multiple overflows and a format string vulnerability : - CVE-2010-2221: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Buffer Errors CWE-119 - CVE-2010-0743: CVSS v2 Base Score: 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P: Format String Vulnerability...