Security fix for the ALT Linux 7 package samba version 4.4.5-alt1

July 10, 2016 Andrey Cherepanov 4.4.5-alt1 - Update for security release with CVE-2016-2119...

Security fix for the ALT Linux 8 package samba-DC version 4.4.5-alt1

4.4.5-alt1 built July 9, 2016 Andrey Cherepanov in task 166817 July 8, 2016 Evgeny Sinelnikov - Update for security release with CVE-2016-2119...

Security fix for the ALT Linux 10 package samba version 4.4.5-alt1

July 8, 2016 Evgeny Sinelnikov 4.4.5-alt1 - Update for security release with CVE-2016-2119...

CVE-2016-2119

libcli/smb/smbXclibase.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the 1 SMB2SESSIONFLAGISGUEST or 2 SMB2SESSIONFLAGISNULL flag...

CVE-2016-2119

CVE-2016-2119 affects Samba 4.x prior to 4.2.14, 4.3.x prior to 4.3.11, and 4.4.x prior to 4.4.5. The flaw allows a man-in-the-middle to downgrade client-side SMB2/3 signing, enabling impersonation of a server when connecting (via SMB2_SESSION_FLAG_IS_GUEST or SMB2_SESSION_FLAG_IS_NULL). Impact s...

CVE-2016-2119

libcli/smb/smbXclibase.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the 1 SMB2SESSIONFLAGISGUEST or 2 SMB2SESSIONFLAGISNULL flag...

Oracle: Security Advisory (ELSA-2012-0743)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco AsyncOS for Content Security Management Appliances Software Remote Code Execution (CSCug80118)

According to its self-reported version, the version of Cisco Content Security Management Appliance running on the remote host is affected by a remote code execution vulnerability due to a flaw in Cisco AsyncOS. An authenticated attacker could potentially exploit this vulnerability to execute...

Cisco AsyncOS for Email Security Appliances Software Remote Code Execution (CSCug79377)

According to its self-reported version and configuration, the Cisco AsyncOS running on the remote Cisco Email Security ESA appliance is affected by a remote code execution vulnerability in the Safelist/Blocklist SLBL function due to improper handling of SLBL database files. An authenticated, remo...

CVE-2014-2119

The CVE-2014-2119 issue affects Cisco AsyncOS for Email Security Appliance (ESA) and Content Security Management Appliance (SMA). The End User Safelist/Blocklist (SLBL) service permits an authenticated remote user to execute arbitrary code with root privileges by uploading a modified SLBL databas...

CVE-2013-2119

Phusion Passenger gem vulnerability (CVE-2013-2119) affects Phusion Passenger for Ruby, specifically the gem versions before 3.0.21 and 4.0.x before 4.0.5. The issue arises from insecure handling of temporary directories/files in /tmp, where a local attacker can pre-create a predictable temporary...

SuSE Update for kernel openSUSE-SU-2013:0925-1 (kernel)

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse201309251.nasl 8448 2018-01-17 16:18:06Z teissa $ SuSE Update for kernel openSUSE-SU-2013:0925-1 kernel Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Moderate: Red Hat Security Advisory: rubygem-passenger security update

Updated rubygem-passenger packages that fix two security issues are now available for Red Hat OpenShift Enterprise 1.2.2. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Fedora Update for rubygem-passenger FEDORA-2013-13234

Check for the Version of rubygem-passenger OpenVAS Vulnerability Test Fedora Update for rubygem-passenger FEDORA-2013-13234 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for rubygem-passenger FEDORA-2013-13234

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 : kernel (ELSA-2012-0862)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0862 advisory. - security fix compile error in commoncap.c Eric Paris 806726 CVE-2012-2123 - security fcaps: clear the same personality flags as suid when fcaps are...

Fedora 17 : rubygem-passenger-3.0.21-1.fc17 (2013-9771)

Update to version 3.0.21 - Fix for CVE-2013-2119 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Updated rubygem-passenger package fixes CVE-2013-2119

Phusion Passengers code did not always create temporary files and directories in a secure manner. Temporary files and directories were sometimes created with a predictable filename. A local attacker can pre-create temporary files, resulting in a denial of service. In addition, this vulnerability...

MGASA-2013-0205 Updated rubygem-passenger package fixes CVE-2013-2119

Phusion Passengers code did not always create temporary files and directories in a secure manner. Temporary files and directories were sometimes created with a predictable filename. A local attacker can pre-create temporary files, resulting in a denial of service. In addition, this vulnerability...

Fedora Update for rubygem-passenger FEDORA-2013-9789

Check for the Version of rubygem-passenger OpenVAS Vulnerability Test Fedora Update for rubygem-passenger FEDORA-2013-9789 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...