OracleVM 3.2 : xen (OVMSA-2013-0036)

The remote OracleVM system is missing necessary patches to address critical security updates : - VT-d: don't permit SVTNOVERIFY entries for known device types Only in cases where we don't know what to do we should leave the IRTE blank suppressing all validation, but we should always log a warning...

krb5: denial of service flaws when handling RFC 1964 tokens

A buffer over-read flaw was found in the way MIT Kerberos handled certain requests. A remote, unauthenticated attacker who is able to inject packets into a client or server application's GSSAPI session could use this flaw to crash the application...

SuSE 11.3 Security Update : krb5 (SAT Patch Number 9564)

The following security issues have been fixed in kerberos 5 : - Two denial of service flaws when handling RFC 1964 tokens. CVE-2014-4341 / CVE-2014-4342 - Multiple flaws in SPNEGO. CVE-2014-4343 / CVE-2014-4344 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : krb5 (openSUSE-SU-2014:0977-1)

The following security isses are fixed in this update : CVE-2014-4341 CVE-2014-4342: denial of service flaws when handling RFC 1964 tokens bnc886016 CVE-2014-4343 CVE-2014-4344: multiple flaws in SPNEGO bnc888697 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packag...

HP OpenView Network Node Manager ovwebsnmpsrv.exe main Buffer Overflow

No description provided by source. $Id: hpnnmovwebsnmpsrvmain.rb 12097 2011-03-23 15:45:48Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...

CVE-2014-1964

CVE-2014-1964 is an XSS vulnerability in the SAP NetWeaver Integration Repository (BC-XI) component of SAP Exchange Infrastructure. The issue affects the Integration Repository via the ESR application and a DIR error, enabling remote attackers to inject arbitrary web script or HTML. The NVD notes...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7798)

XEN has been updated to 4.1.5 c/s 23509 to fix various bugs and security issues. The following security issues have been fixed : - Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier were not preemptible, which allowed local PV kernels to cause a denial of service via...

Fedora Update for xen FEDORA-2013-10929

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-10929 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] [DSA 2666-1] xen security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2666-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 12, 2013 http://www.debian.org/security/faq -...

CVE-2013-1964

Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service host crash, obtain sensitive information, or possibly have other impacts via unspecified vectors...

CVE-2013-1964

Xen CVE-2013-1964: In Xen 4.0.x and 4.1.x, releasing a non-v1, non-transitive grant incorrectly releases a grant reference. This can allow local guest administrators to cause a host crash (DoS), potentially obtain sensitive information, and may have other unspecified impacts via vectors. Fixes ar...

Fedora Update for xen FEDORA-2013-7432

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-7432 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Debian Security Advisory DSA 2666-1 (xen - several vulnerabilities)

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1918 XSA 45 several long latency operations are not preemptible. Some page table manipulation operations for PV guests were not made...

Debian: Security Advisory (DSA-2666-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xen FEDORA-2013-6723

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 17 : xen-4.1.5-1.fc17 (2013-6723)

Thu Apr 25 2013 Michael Young - 4.1.5-1 - update to xen-4.1.5 includes fixes for passed through IRQs or PCI devices might allow denial of service attack XSA-46, CVE-2013-1919 953568 SYSENTER in 32-bit PV guests on 64-bit xen can crash hypervisor XSA-44, CVE-2013-1917 953569 grant releases can...

CentOS Update for thunderbird CESA-2012:1089 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for firefox CESA-2012:1088 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-1964

CVE-2012-1964 corresponds to the certificate-warning clickjacking issue in Mozilla Firefox (4.x–12.0), Firefox ESR 10.x before 10.0.6, Thunderbird 5.0–12.0, and SeaMonkey before 2.10. The vulnerability arises from improper handling of clickjacking on the about:certerror page, allowing a MITM atta...

Microsoft Internet Explorer Multiple Vulnerabilities (2559049)

This host is missing a critical security update according to Microsoft Bulletin MS11-057. OpenVAS Vulnerability Test $Id: secpodms11-057.nasl 6526 2017-07-05 05:43:52Z cfischer $ Microsoft Internet Explorer Multiple Vulnerabilities 2559049 Authors: Rachana Shetty Copyright: Copyright c 2011 SecPo...