Updated kernel-tmb package fixes security issues.

This kernel-tmb update provides the upstream 3.4.52 kernel and fixes the follwing security issues: The pcibackenablemsi function in the PCI backend driver drivers/xen/pciback/confspacecapabilitymsi.c in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause ...

Fedora Update for kernel FEDORA-2013-12530

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : kernel-3.9.9-302.fc19 (2013-12901)

This update contains a number of fixes for vhost-net, bridging, and other bits of the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 18 : kernel-3.9.9-201.fc18 (2013-12530)

Update to latest upstream stable release, Linux v3.9.9. This also includes fixes for issues running VM guests some people were seeing. Update to latest stable upstream release, Linux v3.9.8 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

CVE-2013-2232

The ip6skdstcheck function in net/ipv6/ip6output.c in the Linux kernel before 3.10 allows local users to cause a denial of service system crash by using an AFINET6 socket for a connection to an IPv4 interface...

CVE-2013-2232

CVE-2013-2232 affects the Linux kernel prior to 3.10. The vulnerable code is the ip6_sk_dst_check function in net/ipv6/ip6_output.c; it lets a local user cause a denial-of-service (system crash) by using an AF_INET6 socket to connect to an IPv4 interface. A remedy is the upstream patch applied in...

Debian Security Advisory DSA 2232-1 (exim4)

The remote host is missing an update to exim4 announced via advisory DSA 2232-1. OpenVAS Vulnerability Test $Id: deb22321.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2232-1 exim4 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2232-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2232

CVE-2011-2232 affects Oracle Database Server XML Developer Kit. The vulnerable products include Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 11.1.0.7, 11.2.0.1 and Oracle Fusion Middleware 10.1.3.5. The issue is described as an unspecified vulnerability in the XML Developer Kit component ...

Debian DSA-2232-1 : exim4 - format string vulnerability

It was discovered that Exim, the default mail transport agent in Debian, uses DKIM data obtain from DNS directly in a format string, potentially allowing malicious mail senders to execute arbitrary code. CVE-2011-1764 The oldstable distribution lenny is not affected by this problem because it doe...

Fedora Core 10 FEDORA-2009-8792 (afuse)

The remote host is missing an update to afuse announced via advisory FEDORA-2009-8792. OpenVAS Vulnerability Test $Id: fcore20098792.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8792 afuse Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 10 FEDORA-2009-8792 (afuse)

The remote host is missing an update to afuse announced via advisory FEDORA-2009-8792. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8816 (afuse)

The remote host is missing an update to afuse announced via advisory FEDORA-2009-8816. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora 11 : afuse-0.2-4.fc11 (2009-8816)

Fixes CVE-2008-2232: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2232 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2009-2232

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the sizeid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2232

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the sizeid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2232

The CVE describes a SQL injection in Softbiz Banner Ad Management Script specifically in image.php, exploitable via the size_id parameter. The root cause is improper handling of the size_id input leading to arbitrary SQL execution by remote attackers. The available documents confirm the affected ...

Debian Security Advisory DSA 1611-1 (afuse)

The remote host is missing an update to afuse announced via advisory DSA 1611-1. OpenVAS Vulnerability Test $Id: deb16111.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1611-1 afuse Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Afuse afuse.c文件Shell命令注入漏洞

BUGTRAQ ID: 30245 CVECAN ID: CVE-2008-2232 Afuse是使用FUSE在用户域实现的自动加载文件系统。 Afuse没有正确地过滤文件名便将其用在了system调用中。如果能够读访问afuse文件系统的攻击者使用了类似于以下的路径的话： /path/";arbitrary command;" /path/arbitrary command 则从注册为Afuse加载的目录请求上述特制文件就会导致以提升的权限执行任意命令。 Jacob Bower Afuse 0.2 Debian ------...

CVE-2008-2232

CVE-2008-2232 affects the afuse user-space FUSE automount tool where the expand_template function in afuse.c mishandles a pathname, enabling local privilege elevation. Publicly disclosed fixes target afuse 0.2-4 for Fedora (Fedora 10 via FEDORA-2009-8792 and Fedora 11 via FEDORA-2009-8816) and De...