Ubuntu: Security Advisory (USN-674-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: hplip

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: hplip

The remote host is missing an update to the system as announced in the referenced advisory. VID 37940643-be1b-11dd-a578-0030843d3802 OpenVAS Vulnerability Test $ Description: Auto generated from VID 37940643-be1b-11dd-a578-0030843d3802 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[USN-674-1] HPLIP vulnerabilities

=========================================================== Ubuntu Security Notice USN-674-1 November 19, 2008 hplip vulnerabilities CVE-2008-2940, CVE-2008-2941 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS...

openSUSE 10 Security Update : hplip (hplip-5552)

This update of hplip does not allow to send alert mails as user anymore CVE-2008-2940 and fixes a denial-of-service defect CVE-2008-2941. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

SuSE 10 Security Update : hplip (ZYPP Patch Number 5556)

This update of hplip does not allow to send alert mails as user anymore CVE-2008-2940 and fixes a denial-of-service defect. CVE-2008-2941 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

CVE-2008-2940

The alert-mailing implementation in HP Linux Imaging and Printing HPLIP 1.6.7 allows local users to gain privileges and send e-mail messages from the root account via vectors related to the setalerts message, and lack of validation of the device URI associated with an event message...

CVE-2008-2940

CVE-2008-2940 affects HP Linux Imaging and Printing (HPLIP) 1.6.7. The vulnerability lies in the alert-mailing functionality, allowing a local attacker to gain privileges and send e-mail messages from the root account by sending crafted packets, with root emails triggered by the alert mechanism a...

RHEL 5 : hplip (RHSA-2008:0818)

Updated hplip packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The hplip Hewlett-Packard Linux Imaging and Printing packages provide drivers for...

Moderate: Red Hat Security Advisory: hplip security update

Updated hplip packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The hplip Hewlett-Packard Linux Imaging and Printing packages provide drivers for...

Debian Security Advisory DSA 1185-2 (openssl)

The remote host is missing an update to openssl announced via advisory DSA 1185-2. The fix used to correct CVE-2006-2940 introduced code that could lead to the use of uninitialized memory. Such use is likely to cause the application using the openssl library to crash, and has the potential to all...

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 2175)

A previous openssl update CVE-2006-2940 introduced another bug that can lead to a crash by providing a large prime number. An uninitialized pointer is freed during error handling. This bug allows remote attackers to crash services that use openssl. %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 10 Security Update : compat-openssl097g (ZYPP Patch Number 2163)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...

openSUSE 10 Security Update : compat-openssl097g (compat-openssl097g-2171)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...

openSUSE 10 Security Update : openssl (openssl-2162)

A previous openssl update CVE-2006-2940 introduced another bug that can lead to a crash by providing a large prime number. An uninitialized pointer is freed during error handling. This bug allows remote attackers to crash services that use openssl. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE 10 Security Update : openssl (openssl-2140)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...

IBM and Lenovo Access Support acpRunner ActiveX Security Bypass (CVE-2007-2928; CVE-2007-2929; CVE-2007-2940)

The Access Support software package for IBM and Lenovo systems includes several ActiveX controls. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page. Successful exploitation could result in remote code execution ...

Solaris 9 (sparc) : 117123-10

SunOS 5.9: wanboot and pkg utilities Patch. Date this patch was last updated by Sun : Oct/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Xerox WorkCentre Multiple OpenSSL Vulnerabilities (XRX07-001)

According to its model number and software version, the remote host is a Xerox WorkCentre device that reportedly suffers from multiple issues in the ESS / Network Controller that could allow remote execution of arbitrary code on the affected device, initiation of denial of service attacks, and...