Updated python packages fix CVE-2013-4238 and pip

Updated python packages fix security vulnerability: Ryan Sleevi of the Google Chrome Security Team has discovered that Python's SSL module doesn't handle NULL bytes inside subjectAltNames general names. This could lead to a breach when an application uses ssl.matchhostname to match the hostname...

CVE-2012-4328

The affected products and versions are: vBulletin Suite 4.1.2–4.1.12 , Forum 4.1.2–4.1.12 , and the MAPI plugin 1.4.3 for vBulletin 3.x . The CVE-2012-4328 entry is described as an unspecified vulnerability with unknown impact and attack vectors; no concrete root cause, exploit details, or remedi...

CVE-2011-4328

Gnash prior to 0.8.10 stores cookies in /tmp with world-readable, predictable file names via nsPluginInstance::setupCookies(), allowing local users to obtain sensitive information. Affected versions: Gnash

Debian Security Advisory DSA 2435-1 (gnash)

The remote host is missing an update to gnash announced via advisory DSA 2435-1. OpenVAS Vulnerability Test $Id: deb24351.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2435-1 gnash Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2435-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for gnash FEDORA-2012-2771

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for gnash FEDORA-2012-2719

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : gnash-0.8.10-1.fc15 (2012-2719)

Update to 0.8.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 16 : gnash-0.8.10-1.fc16 (2012-2771)

Update to 0.8.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 17 : gnash-0.8.10-1.fc17 (2012-2617)

Update to 0.8.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-087 February 16, 2011 -- CVE ID: CVE-2010-4328 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint -- TippingPointTM IPS Customer...

CVE-2010-4328

CVE-2010-4328 affects Novell iPrint for Linux Open Enterprise Server 2 SP2/SP3. The root cause is multiple stack-based buffer overflows in ipsmd (/opt/novell/iprint/bin/ipsmd) when handling multiple LPR opcodes, allowing remote code execution via unauthenticated access to TCP port 515 (ilprsrvd)....

CVE-2010-4328

creationtimestamp| type| source ---|---|--- 2011-02-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16192...

CVE-2009-4328

CVE-2009-4328 concerns IBM DB2 UDB 9.5 before Fix Pack 5, where an unspecified issue in the DRDA Services component allows remote authenticated users to trigger a denial of service (server trap) by calling a SQL stored procedure under certain conditions. The impact is a partial availability degra...

CVE-2008-4328

SQL injection vulnerability in sitesearch.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the 1 item, 2 searchordermethod, and 3 searchorder parameters...

CVE-2008-4328

CVE-2008-4328 describes an SQL injection vulnerability in EasyRealtorPRO 2008 affecting site_search.php. The flaw allows remote attackers to inject arbitrary SQL through the input parameters (1) item, (2) search_ordermethod, and (3) search_order, leading to potentially unauthorized data access or...

CVE-2008-4328

creationtimestamp| type| source ---|---|--- 2008-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32418...

CVE-2007-4328

The CVE-2007-4328 entry concerns Mapos Bilder Galerie 1.0 with multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to cause remote PHP code execution by providing a crafted URL to the config[root_ordner] parameter in one of the affected entry points (index.php, galerie...

CVE-2006-4328

SQL injection vulnerability in admin.php in CloudNine Interactive Links Manager 2006-06-12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter...

CVE-2006-4328

CloudNine Interactive Links Manager 2006-06-12 is affected by an SQL injection in admin.php via the nick parameter when magic_quotes_gpc is off. The vulnerability allows remote attackers to execute arbitrary SQL commands, as documented in multiple sources (eVuln/SECURITYVULNS entries). The issue ...