Mandriva Update for bind MDVSA-2012:152-1 (bind)

Check for the Version of bind OpenVAS Vulnerability Test Mandriva Update for bind MDVSA-2012:152-1 bind Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mandriva Linux Security Advisory : inn (MDVSA-2012:156)

A security issue was identified and fixed in ISC INN : The STARTTLS implementation in INN's NNTP server for readers, nnrpd, before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command tha...

Mandriva Update for inn MDVSA-2012:156 (inn)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes multiple security issues and one bug is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Mandriva Linux Security Advisory : apache (MDVSA-2012:154-1)

Multiple vulnerabilities has been found and corrected in apache ASF HTTPD : Insecure handling of LDLIBRARYPATH was found that could lead to the current working directory to be searched for DSOs. This could allow a local user to execute code as root if an administrator runs apachectl from an...

CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

CVE-2011-4945

CVE-2011-4945 affects PolicyKit 0.103, where AdminIdentities are set to the default of the wheel group. This allows local users in wheel to gain root privileges without authentication. The issue is documented across multiple sources (NVD, OSV, Debian, Gentoo GLSA) and is categorized as a local pr...

CVE-2011-5202

BazisVirtualCDBus.sys in WinCDEmu 3.6 allows local users to cause a denial of service system crash via the unmount command to batchmnt.exe...

CVE-2011-5202

CVE-2011-5202 affects WinCDEmu 3.6, where BazisVirtualCDBus.sys allows a local user to trigger a denial-of-service (system crash) by issuing an unmount command to batchmnt.exe. The available connected documents confirm the vulnerable component and the affected workflow, but do not provide patch d...

CVE-2011-4551

CVE-2011-4551 affects TikiWiki CMS/Groupware via tiki-cookie-jar.php, enabling stored XSS that allows injection of arbitrary scripts/HTML through arbitrary parameters. Impact described as remote XSS in all current releases up to 8.2 and 6.5 LTS. Affected component is the tiki-cookie-jar.php handl...

Apple Safari Multiple Vulnerabilities - Oct 2012 (Mac OS X)

This host is installed with Apple Safari web browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplesafarimultvulnoct12macosx.nasl 6018 2017-04-24 09:02:24Z teissa $ Apple Safari Multiple Vulnerabilities - Oct 2012 Mac OS X Authors: Rachana Shetty Copyright:...

GLSA-201209-23 : GIMP: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-23 GIMP: Multiple vulnerabilities Multiple vulnerabilities have been discovered in GIMP. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code with...

Indusoft WebStudio NTWebServer Remote File Access

This module exploits a directory traversal vulnerability in Indusoft WebStudio. The vulnerability exists in the NTWebServer component and allows to read arbitrary remote files with the privileges of the NTWebServer process. The module has been tested successfully on Indusoft WebStudio 6.1 SP6. Th...

Fedora 17 : libxslt-1.1.26-10.fc17 (2012-14083)

Lot of security fixes and a few other bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

Fedora Update for libxslt FEDORA-2012-14083

Check for the Version of libxslt OpenVAS Vulnerability Test Fedora Update for libxslt FEDORA-2012-14083 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu: Security Advisory (USN-1583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1583-1: Ruby vulnerabilities

It was discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. CVE-2011-1005 John Firebaugh discovered that the RubyGems remote gem fetcher did not properly verify SSL certificates...

Cisco DPC2100 Denial of Service

Exploit for hardware platform in category dos / poc Exploit Title: Cisco DPC2100 Denial of Service Date: 09/01/2010 Author: Daniel Smith Software Link: http://www.cisco.com/ Version: HW:2.1/SW:v2.0.2r1256-060303 Tested on: OSX 10.6/Win7 CVE: CVE-2011-1613...

Cisco DPC2100 - Denial of Service

Cisco DPC2100 - Denial of Service Exploit Title: Cisco DPC2100 Denial of Service Date: 09/01/2010 Author: Daniel Smith Software Link: http://www.cisco.com/ Version: HW:2.1/SW:v2.0.2r1256-060303 Tested on: OSX 10.6/Win7 CVE: CVE-2011-1613 =======================================================...

Cisco DPC2100 Denial Of Service

Exploit Title: Cisco DPC2100 Denial of Service Date: 09/01/2010 Author: Daniel Smith Software Link: http://www.cisco.com/ Version: HW:2.1/SW:v2.0.2r1256-060303 Tested on: OSX 10.6/Win7 CVE: CVE-2011-1613 ======================================================= Information...