[slackware-security] xorg-server

New xorg-server packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/xorg-server-1.12.4-i486-2slack14.0.txz: Rebuilt. Patched a use-after-free bug that can cause an ...

[slackware-security] xpdf (SSA:2013-233-02)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security xpdf SSA:2013-233-02 New xpdf packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: +--------------------------+...

Symantec Endpoint Protection Manager (SEPM) Buffer Overflow Vulnerability

The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmbofvuln.nasl 6074 2017-05-05 09:03:14Z teissa $ Symantec Endpoint Protection Manager SEPM Buffer Overflow Vulnerability Authors: Thanga Praka...

Symantec Endpoint Protection Center (SPC) Small Business Edition Buffer Overflow Vulnerability

Symantec Endpoint Protection Manager is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descriptio...

Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : httpd (SSA:2013-218-02)

New httpd packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-218-02. The tex...

[slackware-security] gnupg / libgcrypt

New gnupg and libgcrypt packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. New libgpg-error packages are also available for Slackware 13.1 and older as the supplied version wasn't new enough to compile the fixed version of libgcrypt. He...

CVE-2013-4687

flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways ALGs are enabled, allows remote attackers to cause a denial of service daemon crash via crafted TCP packets, aka PRs 727980, 806269, and 83559...

Nginx 1.3.9/1.4.0 (x86) - Brute Force

nginx 1.3.9/1.4.0 x86 brute force remote exploit copyright c 2013 kingcope ---------------------------- fix for internet exploitation, set MTU: ifconfig mtu 60000 up !!! WARNING !!! this exploit is unlikely to succeed when used against remote internet hosts. the reason is that nginx uses a...

Nginx 1.3.91.4.0 (x86) - Brute Force

Nginx 1.3.91.4.0 x86 - Brute Force nginx 1.3.9/1.4.0 x86 brute force remote exploit copyright c 2013 kingcope ---------------------------- fix for internet exploitation, set MTU: ifconfig mtu 60000 up !!! WARNING !!! this exploit is unlikely to succeed when used against remote internet hosts. the...

Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : curl (SSA:2013-174-01)

New curl packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-174-01. The tex...

kernel (critical)

The openSUSE 12.1 kernel was updated to fix a critical security issue and also some reiserfs bugs. CVE-2013-2850: Incorrect strncpy usage in the network listening part of the iscsi target driver could have been used by remote attackers to crash the kernel or execute code. This required the iscsi...

EasyPHP Webserver Multiple Vulnerabilities

This host is running EasyPHP Webserver and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbeasyphpwebservermultvuln.nasl 6115 2017-05-12 09:03:25Z teissa $ EasyPHP Webserver Multiple Vulnerabilities Authors: Antu Sanadi Copyright: Copyright C 2013 Greenbone Networks GmbH,...

EasyPHP - index.php Authentication Bypass Remote PHP Code Injection

EasyPHP - index.php Authentication Bypass Remote PHP Code Injection source: https://www.securityfocus.com/bid/58945/info EasyPHP is prone to an authentication bypass and a PHP code execution vulnerability. Attackers may exploit these issues to gain unauthorized access to the affected application...

EasyPHP - '/index.php' Authentication Bypass / Remote PHP Code Injection

source: https://www.securityfocus.com/bid/58945/info EasyPHP is prone to an authentication bypass and a PHP code execution vulnerability. Attackers may exploit these issues to gain unauthorized access to the affected application and perform arbitrary actions or execute arbitrary PHP code within t...

EasyPHP Webserver <= 12.1 Multiple Vulnerabilities - Active Check

EasyPHP Webserver is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware 12.1 / 12.2 / 13.0 / 13.1 / 13.37 / 14.0 / current : bind (SSA:2013-086-01)

New bind packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-086-01. The tex...

update for perl (important)

Perl was updated to fix 3 security issues: - fix rehash denial of service compute time bnc804415 CVE-2013-1667 - improve CGI crlf escaping bnc789994 CVE-2012-5526 - sanitize input in Maketext.pm to avoid code injection bnc797060 CVE-2012-6329 In openSUSE 12.1 also the following non-security bug w...

SuSE Update for pidgin openSUSE-SU-2013:0405-1 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test $Id: gbsuse201304051.nasl 8672 2018-02-05 16:39:18Z teissa $ SuSE Update for pidgin openSUSE-SU-2013:0405-1 pidgin Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

SuSE Update for flash-player openSUSE-SU-2013:0295-1 (flash-player)

Check for the Version of flash-player OpenVAS Vulnerability Test $Id: gbsuse201302951.nasl 8483 2018-01-22 06:58:04Z teissa $ SuSE Update for flash-player openSUSE-SU-2013:0295-1 flash-player Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH,...

SuSE Update for xen openSUSE-SU-2012:1687-1 (xen)

Check for the Version of xen OpenVAS Vulnerability Test $Id: gbsuse201216871.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for xen openSUSE-SU-2012:1687-1 xen Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free...