[SECURITY] Fedora 20 Update: bash-4.2.47-4.fc20

The GNU Bourne Again shell Bash is a shell or command language interpreter that is compatible with the Bourne shell sh. Bash incorporates useful features from the Korn shell ksh and the C shell csh. Most sh scripts can be run by bash without modification...

[SECURITY] Fedora 20 Update: not-yet-commons-ssl-0.3.15-2.fc20

Commons-SSL lets you control the SSL options you need in an natural way for each SSLSocketFactory, and those options won't bleed into the rest of your system...

Nucom ADSL ADSLR5000UN - ISP Credentials Disclosure

Nucom ADSL ADSLR5000UN - ISP Credentials Disclosure !/usr/bin/perl Exploit Author: Sebastián Magof Hardware: Modem Nucom ADSL R5000UNv2 Software Version: R5TC008 Vulnerable file: guidewan.html location: http://gateway/telecomGUI/guidewan.html Bug: ISP usr+pwd disclosure Type: Local Date: 24/09/20...

Fedora 20 : pdns-recursor-3.6.1-1.fc20 (2014-10632)

PowerDNS Recursor Security Release 3.6.1 - CVE-2014-3614 Issue: A specific sequence of packets can crash PowerDNS Recursor 3.6.0 remotely CVE-2014-3614 Affected: All deployments of PowerDNS Recursor 3.6.0 Note that Tenable Network Security has extracted the preceding description block directly...

Adobe Reader and Acrobat JavaScript Heap Overflow (APSB14-20; CVE-2014-0567)

A heap overflow vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error while loading a PDF containing a malicious JavaScript code. A remote attacker may exploit this issue by enticing a target user to open a malicious PDF file with an affected version of...

Adobe Acrobat and Reader Sandbox Bypass (APSB14-20; CVE-2014-0568)

A sandbox Security Bypass vulnerability has been reported in Adobe Reader and Acrobat. The vulnerability is due to an error in the sandbox protection mechanism. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted file...

[SECURITY] Fedora 20 Update: pdns-recursor-3.6.1-1.fc20

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 20 Update: haproxy-1.5.4-1.fc20

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

[SECURITY] Fedora 20 Update: asterisk-11.10.2-2.fc20

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

Adobe Acrobat < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)

The version of Adobe Acrobat installed on the remote host is a version prior to 10.1.12 / 11.0.09. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that allows arbitrary code execution. CVE-2014-0560 - A heap-based buffer overflow exists that allows...

Adobe Releases Security Updates for Adobe Reader and Acrobat

Adobe has released security updates for Adobe Reader and Acrobat for Windows and Macintosh. Exploitation of these vulnerabilities could potentially allow an attacker to take control of the affected system. US-CERT encourages users and administrators to review Adobe Security Bulletin APSB14-20 and...

Adobe Reader < 10.1.12 / 11.0.09 Multiple Vulnerabilities (APSB14-20)

The version of Adobe Reader installed on the remote host is a version prior to 10.1.12 / 11.0.09. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that allows arbitrary code execution. CVE-2014-0560 - A heap-based buffer overflow exists that allows...

Fedora 20 : curl-7.32.0-13.fc20 (2014-10741)

use only full matches for hosts used as IP address in cookies CVE-2014-3613 - reject incoming cookies set for top level domains CVE-2014-3620 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 20 : libreoffice-4.2.6.3-3.fc20 (2014-10732)

CVE-2014-3575 arbitrary file preview disclosure via ole2 objects The vulnerability allows an attacker to send a document which when opened will trigger the prompt to 'Update Links' but if the user cancels that prompt may still generate and insert into the document an OLE2 preview image of a file ...

[SECURITY] Fedora 20 Update: curl-7.32.0-13.fc20

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Fedora Update for libreoffice FEDORA-2014-10732

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: procmail-3.22-36.fc20

Procmail can be used to create mail-servers, mailing lists, sort your incoming mail into separate folders/files real convenient when subscribing to one or more mailing lists or for prioritising your mail, preprocess your mail, start any programs upon mail arrival e.g. to generate different chimes...

Fedora Update for qemu FEDORA-2014-10445

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for mariadb FEDORA-2014-9956

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : qemu-1.6.2-8.fc20 (2014-10445)

Fix spice audio playback sample rate bz 1129961 - Fix virtio-blk migration incompatibility caused by CVE backport bz 1115604 - CVE-2014-3615 Fix crash when guest sets high resolution bz 1139121, bz 1139115 Note that Tenable Network Security has extracted the preceding description block directly...