CVE-2011-4111

CVE-2011-4111 affects QEMU’s PCI/CCID passthrough: the buffer overflow in the function ccid_card_vscard_handle_message (file hw/ccid-card-passthru.c ) can be triggered by a crafted VSC_ATR message. Vulnerable in QEMU versions earlier than 0.15.2 and in the 1.x branch before 1.0-rc4 . Exploitation...

Fedora Update for python-glanceclient FEDORA-2013-14814

Check for the Version of python-glanceclient OpenVAS Vulnerability Test Fedora Update for python-glanceclient FEDORA-2013-14814 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Fedora Update for python-glanceclient FEDORA-2013-14814

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : python-glanceclient-0.9.0-3.fc19 (2013-14814)

Fix SSL certificate CNAME checking. Fixes CVE-2013-4111 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2012-4111

The CVE-2012-4111 issue affects Cisco UCS Fabric Interconnect’s create certreq command. An authenticated, local attacker can exploit unsanitized input to execute commands, obtaining a root shell on the underlying OS (Bug CSCtq86563). Cisco’s advisory confirms this local privilege escalation and t...

CVE-2013-4111

The CVE concerns the Python client library for Glance, python-glanceclient, where versions before 0.10.0 fail to properly validate the server certificate (preverify_ok), allowing MITM spoofing via an arbitrary valid X.509 certificate. Impact: potential SSL-based credential/server spoofing. The is...

CVE-2013-4111

The Python client library for Glance python-glanceclient before 0.10.0 does not properly check the preverifyok value, which prevents the server hostname from being verified with a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate and allows...

Oracle Linux 6 : qemu-kvm (ELSA-2011-1777)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1777 advisory. - CVE: CVE-2011-4111 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

RHEL 6 : qemu-kvm (RHSA-2011:1777)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1777 advisory. - qemu: ccid: buffer overflow in handling of VSCATR message CVE-2011-4111 Note that Nessus has not tested for this issue but has instead relied only ...

RHEL 6 : qemu-kvm (RHSA-2011:1801)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1801 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for...

CentOS Update for qemu-img CESA-2011:1777 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS Update for qemu-img CESA-2011:1801 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 6 : qemu-kvm (CESA-2011:1777)

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CentOS 6 : qemu-kvm (CESA-2011:1801)

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.209.el62.1 - kvm-ccid-Fix-buffer-overrun-in-handling-of-VSCATR-messa.patch bz751312 - CVE: CVE-2011-4111 - Resolves: bz751312 CVE-2011-4111 qemu: ccid: buffer overflow in handling of VSCATR message rhel-6.2.z...

Important: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

HP System Management Homepage Cross Site Scripting

PR10-11: Multiple XSS injection vulnerabilities and a offsite redirection flaw within HP System Management Homepage Insight Manager Vulnerability found: 6th June 2010 Date Published 20th May 2011 Severity: Medium Description: XSS vulnerabilities have been found within HP System Management; Arisin...

CVE-2010-4111

CVE-2010-4111 is an XSS vulnerability in HP SMH/Insight Diagnostics (Online Edition) prior to version 8.5.1.3712. The issue allows remote attackers to inject arbitrary web scripts/HTML via crafted requests, with documented risks including cookie theft and phishing-style payloads. OpenVAS entries ...

CVE-2010-4111

Cross-site scripting XSS vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

KLA10187 CI vulnerability in HP Insight Diagnostics

XSS vulnerability was found in the HP Insight Diagnostics. By exploiting this vulnerability malicious users can inject web script. This vulnerability can be exploited from remote by unknown vectors. Original advisories - Related products HP-Insight-Diagnostics CVE list CVE-2010-4111 warning...