112 matches found
Oracle Linux 6 / 7 : wget (ELSA-2014-1764)
The remote Oracle Linux 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-1764 advisory. 1.14-10.1 - Fix CVE-2014-4877 wget: FTP symlink arbitrary filesystem access 1156135 Tenable has extracted the preceding description block directly from the...
RHEL 6 / 7 : wget (RHSA-2014:1764)
The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2014:1764 advisory. - wget: FTP symlink arbitrary filesystem access CVE-2014-4877 Note that Nessus has not tested for this issue but has instead relied only on the...
CentOS Update for wget CESA-2014:1764 centos6
Check the version of wget SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882071";...
Moderate: Red Hat Security Advisory: wget security update
An updated wget package that fixes one security issue is now available for Red Hat Enterprise Linux 6 and 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...
VUPEN Security Research - Microsoft Internet Explorer "Request" Object Confusion Sandbox Bypass (Pwn2Own 2014)
VUPEN Security Research - Microsoft Internet Explorer "Request" Object Confusion Sandbox Bypass Pwn2Own 2014 Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as...
openSUSE Security Update : exim (openSUSE-SU-2011:0456-1)
This exim security update fixes importer string handling in DKIM signatures. CVE-2011-1764 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update exim-4507. The text description of this plugin is C...
openSUSE Security Update : PackageKit (openSUSE-SU-2013:0889-1)
The PackageKit zypp backend was fixed to only allow patches to be updated. Otherwise a regular user could install new packages or even downgrade older packages to ones with security problems. CVE-2013-1764 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
openSUSE Security Update : exim (openSUSE-SU-2011:0456-1)
This exim security update fixes importer string handling in DKIM signatures. CVE-2011-1764 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update exim-4507. The text description of this plugin is C...
CVE-2014-1764
CVE-2014-1764 affects Microsoft Internet Explorer 7–11. The issue is an object confusion vulnerability in the data exchanged between the broker and sandboxed processes, allowing a sandboxed process to execute code in the broker context and bypass IE Protected Mode. This can lead to remote code ex...
CVE-2013-1764
The Zypper aka zypp backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method...
CVE-2013-1764
The Zypper aka zypp backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method...
CVE-2013-1764
The CVE-2013-1764 issue affects the Zypper/zypp backend in PackageKit prior to 0.8.8. According to multiple sources (SUSE, UBUNTU, Debian, etc.), local users can downgrade packages via the install updates method, indicating a local escalation/precedent flaw that allows downgrades rather than enf...
Oracle Linux 6 : ruby (ELSA-2013-1764)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1764 advisory. 1.8.7.352-13 - Workaround build issues against OpenSSL with enabled ECC curves. - Make DRb compatible with OpenSSL 1.0.1...
RedHat Update for ruby RHSA-2013:1764-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 12.04 LTS / 12.10 : glance vulnerability (USN-1764-1)
Stuart McLaren discovered an issue with Glance v1 API requests. An authenticated attacker could exploit this to expose the Glance operator's Swift and/or S3 credentials via the response headers when requesting a cached image. Note that Tenable Network Security has extracted the preceding...
Ubuntu: Security Advisory (USN-1764-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE Update for exim openSUSE-SU-2012:1404-1 (exim)
Check for the Version of exim OpenVAS Vulnerability Test $Id: gbsuse201214041.nasl 8267 2018-01-02 06:29:17Z teissa $ SuSE Update for exim openSUSE-SU-2012:1404-1 exim Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...
CVE-2012-1764
CVE-2012-1764 concerns an unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products 8.50–8.52 . The issue allows remote authenticated users to affect integrity, with the root cause linked to MCF . The provided documents identify the affected produc...
CVE-2011-1764
Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...
CVE-2011-1764
Format string vulnerability in the dkimeximverifyfinish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in data used in DKIM logging, as demonstrated by an identity field...