Fedora 7 : bind-9.4.2-2.fc7 (2007-4658)

fixed address of L.ROOT-SERVERS.NET 411141 - CVE-2007-6283 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

RHEL 5 : libexif (RHSA-2007:1165)

Updated libexif packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specificatio...

BadBlue 2.72 - PassThru Remote Buffer Overflow

BadBlue 2.72 - PassThru Remote Buffer Overflow !/usr/bin/perl -w http://aluigi.altervista.org/adv/badblue-adv.txt https://www.securityfocus.com/bid/26803 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6379 exploit for stack overflow in badblue 2.72 Credit to Luigi Auriemma Jacopo Cervini...

[EXPL] Socket Connection Timing Can Reveal Information About Network Configuration (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Fedora 8 : wireshark-0.99.7-2.fc8 (2007-4590)

Various flaws fixed by upgrade to 0.99.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

BadBlue 2.72 - PassThru Remote Buffer Overflow

!/usr/bin/perl -w http://aluigi.altervista.org/adv/badblue-adv.txt https://www.securityfocus.com/bid/26803 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6379 exploit for stack overflow in badblue 2.72 Credit to Luigi Auriemma Jacopo Cervini [email protected] 22/12/2007 use IO::Socket;...

SuSE 10 Security Update : clamav (ZYPP Patch Number 4836)

This version upgrade to 0.92 fixes numerous flaws including some security problems. CVE-2007-6335 / CVE-2007-6336 / CVE-2007-6337 Please note that the version number of the clamav library has changed. Programs linked against libclamav therefore need to be updated as well. %NASLMINLEVEL 70300 C...

CentOS 4 : autofs5 (CESA-2007:1177)

Updated autofs5 technology preview packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which...

Fedora 8 : exiv2-0.15-5.fc8 (2007-4551)

Mon Dec 17 2007 Rex Dieter 0.15-5 - CVE-2007-6353 425922 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

SuSE 10 Security Update : xen (ZYPP Patch Number 4766)

This update fixes various Xen issues. Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service hypervisor crash by using a debug register DR7 to set certain breakpoints. - Xen 3.1.1 does not prevent modification of the CR4 TSC from...

Fedora 7 : exiv2-0.15-5.fc7 (2007-4591)

Mon Dec 17 2007 Rex Dieter 0.15-5 - CVE-2007-6353 425922 - Tue Sep 18 2007 Rex Dieter 0.15-4 - -libs: -Requires: %name - Tue Aug 21 2007 Rex Dieter 0.15-3 - -libs subpkg to be multilib-friendlier f8+ - Sat Aug 11 2007 Rex Dieter 0.15-2 - License: GPLv2+ - Thu Jul 12 2007 Rex Dieter 0.15-1 -...

Fedora 8 : autofs-5.0.2-24 (2007-4707)

Fri Dec 21 2007 Ian Kent - 5.0.2-24 - Bug 426400: CVE-2007-6285 autofs default doesn't set nodev in /net f8 - use mount option 'nodev' for '-hosts' map unless 'dev' is explicily specified. - Tue Dec 18 2007 Ian Kent - 5.0.2-22 - Bug 397591 SELinux is preventing /sbin/rpc.statd rpcdt 'search' to...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 4808)

This update fixes multiple bugs in php : - use system pcre library to fix several pcre vulnerabilities. CVE-2007-1659 / CVE-2006-7230 / CVE-2007-1660 / CVE-2006-7227 / CVE-2005-4872 / CVE-2006-7228 - Flaws in processing multi byte sequences in htmlentities/htmlspecialchars. CVE-2007-5898 - overly...

openSUSE 10 Security Update : clamav (clamav-4832)

This version upgrade to 0.92 fixes numerous flaws including some security problems CVE-2007-6335, CVE-2007-6336, CVE-2007-6337. Please note that the version number of the clamav library has changed. Programs linked against libclamav therefore need to be updated as well. %NASLMINLEVEL 70300 C...

RHEL 4 : libexif (RHSA-2007:1166)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1166 advisory. - libexif integer overflow CVE-2007-6352 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

CentOS 4 : libexif (CESA-2007:1166)

Updated libexif packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The libexif packages contain the Exif library. Exif is an image file format specification that...

Fedora 7 : wireshark-0.99.7-1.fc7 (2007-4690)

upgrade to 0.99.7 fixes various security flaws. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE 10 Security Update : libexiv2 (libexiv2-4850)

Specially crafted files could trigger an integer overflow in libexiv2 CVE-2007-6353. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libexiv2-4850. The text description of this plugin is C SUS...

Fedora 8 : libexif-0.6.15-5.fc8 (2007-4667)

This update fixes to recently discovered vulnerabilities in libexif, CVE-2007-6351 and CVE-2007-6352. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

RHEL 4 / 5 : thunderbird (RHSA-2007:1083)

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A cross-site...