Fedora Update for trafficserver FEDORA-2014-8790

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

trafficserver -- unspecified vulnerability

Bryan Call reports: Below is our announcement for the security issue reported to us from Yahoo! Japan. All versions of Apache Traffic Server are vulnerable. We urge users to upgrade to either 4.2.1.1 or 5.0.1 immediately. This fixes CVE-2014-3525 and limits access to how the health checks are...

Oracle Linux 5 : xen (ELSA-2009-1472)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1472 advisory. 3.0.3-94.el54.1 - Fix race condition on domain reboot rhbz 525143 - Avoid multiple restarts of a domain rhbz 525141 - Add grub.conf password protection support ...

CVE-2013-3525

CVE-2013-3525 affects Request Tracker (RT) versions 4.0.10 and earlier in the Approvals/ section, where a SQL injection via the ShowPending parameter could allow remote command execution. The issue is consistently described across sources as a SQL injection vulnerability; the vendor disputes repl...

CVE-2013-3525

creationtimestamp| type| source ---|---|--- 2013-04-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38459...

RHEL 6 : Red Hat Network Satellite server jabberd (RHSA-2012:1538)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:1538 advisory. This package provides jabberd 2, an Extensible Messaging and Presence Protocol XMPP server used for XML based communication. It was discovered that t...

Low: Red Hat Security Advisory: Red Hat Network Proxy server jabberd security update

An updated jabberd package that fixes one security issue is now available for Red Hat Network Proxy 5.5 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives ...

Low: Red Hat Security Advisory: Red Hat Network Satellite server jabberd security update

An updated jabberd package that fixes one security issue is now available for Red Hat Network Satellite 5.5 for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which...

Fedora Update for jabberd FEDORA-2012-12481

Check for the Version of jabberd OpenVAS Vulnerability Test Fedora Update for jabberd FEDORA-2012-12481 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora 16 : jabberd-2.2.14-4.fc16 (2012-12481)

included patch for 'Vulnerability in XMPP Server Dialback Implementations' http://xmpp.org/resources/security-notices/server-dialback/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automaticall...

Fedora Update for jabberd FEDORA-2012-12487

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for jabberd FEDORA-2012-12481

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-3525

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-3525

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

CVE-2012-3525

CVE-2012-3525 affects jabberd 2 (s2s/out.c) where XMPP Server Dialback Verify/Authorization responses were not properly validated. This allows remote XMPP servers to spoof the source domain in server-to-server messages. Affected: jabberd 2.2.16 and earlier. Impact is domain spoofing in S2S connec...

CVE-2012-3525

s2s/out.c in jabberd2 2.2.16 and earlier does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a 1 Verify Response or 2 Authorization Response...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5608)

This update of the SUSE Linux Enterprise 10 Service Pack 1 kernel contains lots of bugfixes and several security fixes : - Added missing capability checks in sbniioctl. CVE-2008-3525 - On AMD64 some string operations could leak kernel information into userspace. CVE-2008-0598 - Added range checki...

CVE-2011-3525

Oracle Application Express (APEX) in Oracle Database Server is affected by CVE-2011-3525. The Nessus entry for Oracle APEX CVE-2011-3525 describes an unspecified vulnerability in the APEX component that affects Oracle Database Server versions 3.2 and 4.0, allowing remote authenticated users to im...

CentOS Update for xen CESA-2009:1472 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-3525

CVE-2010-3525 affects Oracle’s PeopleSoft and JD Edwards Suite (8.9–9.1) in the following components: FMS, SCM, EPM, CRM, and Campus Solutions. The vulnerability is described as an unspecified issue that allows a remote attacker who is authenticated to affect confidentiality and integrity via unk...