Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 (Windows)

The host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdesrsecbypassvulnoct12win.nasl 6074 2017-05-05 09:03:14Z teissa $ Mozilla Thunderbird ESR Security Bypass Vulnerabilities - Oct 12 Windows Authors: Arun...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2021)

Description of changes: CVE-2012-2123: Privilege escalation when assigning permissions using fcaps. If a process increases permissions using fcaps, all of the dangerous personality flags which are cleared for suid apps are not cleared. This has allowed programs that gained elevated permissions...

Oracle Linux 5 : hypervkvpd (ELSA-2013-0807)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0807 advisory. - Validate Netlink source address CVE-2012-5532 rhbz953560 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

Oracle Linux 5 / 6 : openssl (ELSA-2012-0518)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0518 advisory. - fix for CVE-2012-2110 - memory corruption in asn1d2ireadbio 814185 openssl098e: Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : qemu-kvm (ELSA-2012-0050)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0050 advisory. - Resolves: bz772081 EMBARGOED CVE-2012-0029 qemu-kvm: e1000: processtxdesc legacy mode packets heap overflow rhel-6.2.z - CVE: CVE-2011-4127 - Resolves: bz7677...

Oracle Linux 5 : kernel (ELSA-2012-0107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0107 advisory. - misc Move exitrobustlist to mmrelease, null lists on cleanup Laszlo Ersek 771774 750283 CVE-2012-0028 - scsi fix 32-on-64 block device ioctls Paolo...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2020)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2020 advisory. - net: sock: validate datalen before allocating skb Jason Wang Bugdb: 13966CVE-2012-2136 - fcaps: clear the same personality flags as suid when fca...

Oracle Linux 6 : qemu-kvm (ELSA-2012-1234)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1234 advisory. 0.12.1.2-2.295.el63.2 - kvm-console-bounds-check-whenever-changing-the-cursor-du.patch bz851257 - Resolves: bz851257 EMBARGOED CVE-2012-3515 qemu/kvm: VT100...

Oracle Linux 6 : gimp (ELSA-2012-1180)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1180 advisory. 2:2.6.9-4.3 - fix overflow in GIF loader 847303 2:2.6.9-4.2 - fix overflows in GIF, CEL loaders 727800, 839020 Tenable has extracted the preceding...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2012-1385)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1385 advisory. 1:1.6.0.0-1.28.1.10.10.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.28.1.10.10 - Updated to IcedTea6 1.10.10 - Resolves rhbzs 856124, 865346,...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2038)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-2038 advisory. - CVE-2012-3412 sfc: Fix maximum number of TSO segments and minimum TX queue size Ben Hutchings Orabug: 14769994 CVE-2012-3412 - dl2k: Clean up rioioctl...

Oracle Linux 5 / 6 : samba (ELSA-2012-0465)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0465 advisory. - Security Release, fixes CVE-2012-1182 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Oracle Linux 5 / 6 : xulrunner (ELSA-2012-0143)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0143 advisory. 1.9.2.26-2.0.1.el62 - Replace xulrunner-redhat-default-prefs.js with xulrunner-oracle-default-prefs.js 1.9.2.26-2 - added fix for mozbz727401 Tenable has...

Oracle Linux 5 / 6 : postgresql / and / postgresql84 (ELSA-2012-1037)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1037 advisory. - Update to PostgreSQL 8.4.12, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-12.html including the fixes for...

Oracle Linux 5 / 6 : thunderbird (ELSA-2012-1483)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2012-1483 advisory. 10.0.11-1.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 10.0.11-1 - Update to 10.0.11 ESR Tenabl...

Oracle Linux 5 / 6 : firefox (ELSA-2012-1350)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1350 advisory. firefox 10.0.8-1.0.2.el63 - Updated firefox-oracle-default-prefs.js based on latest firefox-redhat-default-prefs.js 10.0.8-1.0.1.el63 - Replace...

Oracle Linux 6 : automake (ELSA-2013-0526)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-0526 advisory. 1.11.1-4 - remove BR dependency on java-devel-openjdk 1.11.1-3 - fix for CVE-2012-3386 -- 'make distcheck' was making the directory distdir world-readable 84846...

Oracle Linux 6 : kernel (ELSA-2012-0571)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0571 advisory. - virt VMX: vmxsetcr0 expects kvm-srcu locked Marcelo Tosatti 808206 807507 CVE-2012-1601 - virt KVM: Ensure all vcpus are consistent with in-kernel...

Oracle Linux 6 : openssl (ELSA-2012-0059)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0059 advisory. - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes 771770 - fix for CVE-2011-4576 - uninitialize...

Oracle Linux 5 / 6 : rpm (ELSA-2012-0451)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0451 advisory. - Proper region tag validation on package/header read CVE-2012-0060 - Double-check region size against header size CVE-2012-0061 Tenable has...