Oracle Linux 6 : kernel (ELSA-2012-0862)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0862 advisory. - security fix compile error in commoncap.c Eric Paris 806726 CVE-2012-2123 - security fcaps: clear the same personality flags as suid when fcaps are...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2021)

Description of changes: CVE-2012-2123: Privilege escalation when assigning permissions using fcaps. If a process increases permissions using fcaps, all of the dangerous personality flags which are cleared for suid apps are not cleared. This has allowed programs that gained elevated permissions...

Oracle Linux 5 : vixie-cron (ELSA-2012-0304)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-0304 advisory. - CVE-2010-0424 vixie-cron, cronie: Race condition by setting timestamp of user's crontab file, when editing the file Tenable has extracted the preceding...

Oracle Linux 5 : dhcp (ELSA-2012-1140)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1140 advisory. 12:3.0.5-31.1 - An error in the handling of malformed client identifiers can cause a denial-of-service condition in affected servers. CVE-2012-3571, 843124...

Oracle Linux 5 : kernel (ELSA-2012-1323-1)

From Red Hat Security Advisory 2012:1323 : Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System...

Oracle Linux 6 : ipa (ELSA-2013-0528)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0528 advisory. - Fix typo in patch 0048 for CVE-2012-5484 878220 - Compliant client side session cookie behavior. CVE-2012-5631. 886371 - Use secure method to retrieve IPA CA...

Oracle Linux 6 : openchange (ELSA-2013-0515)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0515 advisory. evolution-mapi 0.28.3-12 - Add patch for RH bug 903241 Double-free on message copy/move 0.28.3-11 - Add patch for RH bug 902932 Cannot connect with latest samba...

Oracle Linux 5 / 6 : openssl (ELSA-2012-0699)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0699 advisory. - fix for CVE-2012-2333 - improper checking for record length in DTLS 820686 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2034)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2034 advisory. - dl2k: Clean up rioioctl Stephan Mueller Orabug: 14680245 CVE-2012-2313 - hugetlb: fix resvmap leak in error path Christoph Lameter Orabug: 146802...

Oracle Linux 5 : busybox (ELSA-2012-0308)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0308 advisory. 1:1.2.0-13 - Resolves: 768083 'busybox various flaws' including: 'buffer underflow in decompression' 'udhcpc insufficient checking of DHCP options'...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel Security (ELSA-2012-2039)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2039 advisory. 2.6.39-200.33.1 - sfc: Replace some literal constants with EFXPAGESIZE/EFXBUFSIZE Ben Hutchings Orabug: 14769994 - CVE-2012-3412 sfc: Fix maximum number of...

Oracle Linux 6 : sblim-cim-client2 (ELSA-2012-0987)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0987 advisory. 2.1.3-2 - Fix possible XML Hash DoS Resolves: 803391 2.1.3 - Update to sblim-cim-client2-2.1.3 2.0.9.2-1 - Initial support Tenable has extracted the preceding...

Oracle Linux 5 / 6 : libexif (ELSA-2012-1255)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1255 advisory. 0.6.21-5 - Update to version 0.6.21 fixing many bugs and CVEs - Remove upstreamed patches - Resolves: 839915 Tenable has extracted the preceding...

Oracle Linux 5 : kernel (ELSA-2012-1061)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1061 advisory. - xen x8664: check address on trap handlers or guest callbacks Paolo Bonzini 813430 813431 CVE-2012-0217 - xen x8664: Do not execute sysret with a non-canonical...

Oracle Linux 5 / 6 : firefox (ELSA-2012-0079)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0079 advisory. firefox: 3.6.26-1.0.1.el62 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 3.6.26-1 - Update to 3.6.26 xulrunner:...

Oracle Linux 6 : openoffice.org (ELSA-2012-0705)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0705 advisory. - Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in the Powerpoint documents...

Oracle Linux 6 : mysql (ELSA-2012-1462)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1462 advisory. 5.1.66-1 - Update to 5.1.66, for assorted upstream bugfixes including CVEs announced in July and October 2012 Resolves: 871813 Tenable has extracted th...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2044)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2044 advisory. - hugepages: fix use after free bug in 'quota' handling 15842385 CVE-2012-2133 - mm: Hold a file reference in madviseremove 15842884 CVE-2012-3511 ...

Oracle Linux 5 : squirrelmail (ELSA-2012-0103)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-0103 advisory. - patch for CVE-2010-2813 was not complete - fix: CVE-2010-1637 : Port-scans via non-standard POP3 server ports in Mail Fetch plugin - fix: CVE-2010-28...

Oracle Linux 5 / 6 : elinks (ELSA-2013-0250)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0250 advisory. 0.12-0.21.pre5 - do not delegate GSSAPI credentials CVE-2012-4545 Tenable has extracted the preceding description block directly from the Oracle Linux...