80 matches found
Fedora 18 : libvirt-0.10.2.8-1.fc18 (2013-17305)
Rebased to version 0.10.2.8 - CVE-2013-4311: Insecure polkit usage bz 1009539, bz 1005332 - CVE-2013-4296: Invalid free memory stats bz 1006173, bz 1009667 - CVE-2013-4291: Supplementary groups handling bz 1006509, bz 1006511 - Fix LXC container creation if selinux disabled bz 977114 - Fix virsh...
DEBIAN-CVE-2013-4291
The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which allows local users to gain privileges...
CVE-2013-4291
The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which allows local users to gain privileges...
CVE-2013-4291
Libvirt CVE-2013-4291 affects virSecurityManagerSetProcessLabel in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1. When a domain has read an uid:gid label, it fails to correctly set group memberships, enabling local users to gain privileges. The description indicates a local privilege escalation path, but ...
Security fix for the ALT Linux 8 package libvirt version 1.1.2-alt1
Sept. 3, 2013 Alexey Shabalin 1.1.2-alt1 - 1.1.2 - fixed CVE-2013-4291, CVE-2013-4292, CVE-2013-5651...
Oracle Linux 5 : wireshark (ELSA-2013-0125)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0125 advisory. - fixed CVE-2012-4285, CVE-2012-4289, CVE-2012-4291 and CVE-2012-4290 849521 - fixed various flaws: CVE-2011-1959 CVE-2011-2175 CVE-2011-1958...
Mandriva Linux Security Advisory : wireshark (MDVSA-2012:134)
Multiple vulnerabilities was found and corrected in Wireshark : The DCP ETSI dissector could trigger a zero division CVE-2012-4285. The MongoDB dissector could go into a large loop CVE-2012-4287. The XTP dissector could go into an infinite loop CVE-2012-4288. The AFP dissector could go into a lar...
Fedora Update for wireshark FEDORA-2012-12085
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Wireshark 1.8.x < 1.8.2 Multiple Vulnerabilities
The installed version of Wireshark is 1.8.x before 1.8.2. This version is affected by the following vulnerabilities : - The 'DCP ETSI' dissector and 'pcap-ng' parser can attempt a divide by zero operation leading to an application crash. CVE-2012-4285, CVE-2012-4286 - The 'MongoDB', 'XTP', 'AFP',...
Wireshark 1.4.x < 1.4.15 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.4.15. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.15 advisory. - Buffer overflow in epan/dissectors/packet-rtps2.c in the RTPS2 dissector in Wireshark 1.4.x before 1.4.15, 1.6...
CVE-2012-4291
The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service memory consumption via a malformed packet...
CVE-2012-4291
The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service memory consumption via a malformed packet...
CVE-2012-4291
Wireshark CVE-2012-4291 affects the CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2. A malformed packet can cause a denial of service via memory consumption. Remediation per sources is to upgrade to fixed releases: Wireshark 1.4.15, 1.6.10, or 1.8.2 (de...
CVE-2011-4291
CVE-2011-4291 affects Moodle 2.0.x before 2.0.3. The vulnerability allows remote authenticated users to cause a denial of service by performing a sequence of crafted ratings operations that lead to invalid database records. The available connected documents confirm the affected product/version an...
Fedora Core 9 FEDORA-2009-4291 (ipsec-tools)
The remote host is missing an update to ipsec-tools announced via advisory FEDORA-2009-4291. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
Fedora 9 : ipsec-tools-0.7.2-1.fc9 (2009-4291)
Minor version update from upstream fixing remote DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
CVE-2007-4291
Cisco IOS 12.0–12.4 vulnerability CVE-2007-4291 allows remote attackers to cause denial of service via malformed MGCP packets (hang) or malformed H.323/RTP packets (crash), with specific identifiers CSCsf08998, CSCsi60004/CSCsg70474, CSCse68138, and CSCse05642. Affected components include VOIP RT...
CVE-2006-4291
CVE-2006-4291 describes a PHP remote file inclusion in PHlyMail Lite 3.4.4 and earlier (Build 3.04.04), specifically in handlers/email/mod.listmail.php, allowing an attacker to execute arbitrary PHP code via a URL supplied in the PM [path][handler] parameter. Connected sources corroborate the sam...
CVE-2005-4291
CVE-2005-4291 : A cross-site scripting (XSS) vulnerability exists in cart.cgi of ECTOOLS Onlineshop 1.0 and earlier. Arbitrary web script/HTML can be injected via the (1) product, (2) category, and (3) uid parameters. The available documents confirm the affected component is cart.cgi within ECTOO...
