Fedora Update for python-keyring FEDORA-2013-22694

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : samba-4.0.13-1.fc19 (2013-23085)

This updates Samba to version 4.0.13, which fixes two security bugs. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Design/Logic Flaw

xslt.c in libxslt before 1.1.25 allows context-dependent attackers to cause a denial of service crash via a stylesheet that embeds a DTD, which causes a structure to be accessed as a different type. NOTE: this issue is due to an incomplete fix for CVE-2012-2825...

Fedora 20 : python-keyring-3.3-1.fc20 (2013-22644)

======= CHANGES ======= Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Amazon Linux AMI : dracut (ALAS-2013-257)

It was discovered that dracut created initramfs images as world readable. A local user could possibly use this flaw to obtain sensitive information from these files, such as iSCSI authentication passwords, encrypted root file system crypttab passwords, or other information. CVE-2012-4453 C Tenabl...

CVE-2012-5394

Cross-site request forgery CSRF vulnerability in the CentralAuth extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 allows remote attackers to hijack the authentication of users for requests that login via vectors involving image loading...

CVE-2012-5394

CVE-2012-5394 is a CSRF vulnerability in the CentralAuth extension for MediaWiki that can allow an attacker to hijack a user’s authenticated session for login requests via image-loading vectors. Affected are MediaWiki versions: before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3. The NV...

CVE-2012-6151

Net-SNMP vulnerability CVE-2012-6151: Net-SNMP 5.7.1 and earlier allows remote denial of service via AgentX subagent timeout during MIB registration/GETNEXT, causing snmpd to crash or hang. The F5 advisory details exploitation via SNMP daemon and lists affected BIG-IP/related products and version...

Oracle Linux 5 : php (ELSA-2013-1814)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1814 advisory. 5.1.6-43 - drop unneeded patch 5.1.6-42 - add security fixes for CVE-2012-2688, CVE-2011-1398, CVE-2013-1643, CVE-2013-6420 Tenable has extracted the...

Samba 3.x < 3.6.22 / 4.0.x < 4.0.13 / 4.1.x < 4.1.3 Multiple Vulnerabilities

According to its banner, the version of Samba running on the remote host is 3.3.x equal or later than 3.3.10, 3.4.x, 3.5.x, 3.6.x prior to 3.6.22, 4.0.x prior to 4.0.13 or 4.1.x prior to 4.1.3. It is, therefore, potentially affected by multiple vulnerabilities : - A security bypass vulnerability...

php security update

CentOS Errata and Security Advisory CESA-2013:1814 Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base...

Critical: Red Hat Security Advisory: php security update

Updated php packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Double free

portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Port-Class Driver Double Fetch Vulnerability."...

Spoofing

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service reboot via a crafted TrueType font TTF file, aka "TrueType Font Parsing Vulnerability."...

CVE-2013-3903

Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service reboot via a crafted TrueType font TTF file, aka "TrueType Font Parsing Vulnerability."...

Medium: openmpi

Issue Overview: A flaw was found in the way ibutils handled temporary files. A local attacker could use this flaw to cause arbitrary files to be overwritten as the root user via a symbolic link attack. It was discovered that librdmacm used a static port to connect to the ibacm service. A local...

MS KB2871690: Update to Revoke Non-compliant UEFI Modules

The remote host is missing Microsoft KB2871690, an update that revokes the digital signatures of nine third-party UEFI modules. This update prevents the modules from being loaded on systems where UEFI Secure Boot is enabled. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft Windows Kernel Local Privilege Escalation Vulnerabilities (2880430)

This host is missing an important security update according to Microsoft Bulletin MS13-101 OpenVAS Vulnerability Test $Id: secpodms13-101.nasl 33668 2013-12-11 08:49:46Z dec$ Microsoft Windows Kernel Local Privilege Escalation Vulnerabilities 2880430 Authors: Antu Sanadi Copyright: Copyright C 20...

MS Windows Scripting Runtime Object Library RCE Vulnerability (2909158)

This host is missing an critical security update according to Microsoft Bulletin MS13-099. OpenVAS Vulnerability Test $Id: secpodms13-099.nasl 33665 2013-12-11 08:15:24Z dec$ MS Windows Scripting Runtime Object Library RCE Vulnerability 2909158 Authors: Shakeel Copyright: Copyright C 2013 SecPod,...

Medium: dracut

Issue Overview: It was discovered that dracut created initramfs images as world readable. A local user could possibly use this flaw to obtain sensitive information from these files, such as iSCSI authentication passwords, encrypted root file system crypttab passwords, or other information...