openSUSE Security Update : kernel (openSUSE-SU-2011:0004-1)

The openSUSE 11.3 kernel was updated to fix various bugs and security issues. Following security issues have been fixed: CVE-2010-4347: A local user could inject ACPI code into the kernel via the world-writable 'customdebug' file, allowing local privilege escalation. CVE-2010-4258: A local attack...

CVE-2013-4347

The 1 makenonce, 2 generatenonce, and 3 generateverifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess the nonce via a brute force attack...

CVE-2013-4347

The CVE-2013-4347 issue affects SimpleGeo python-oauth2: the make_nonce, generate_nonce, and generate_verifier functions use weak random values to generate nonces, enabling potential replay via captured traffic. Evidence and details come from GHSA entry and related advisories; a patch/update addr...

Updated python-oauth2 packages fix CVE-2013-4347

It was found that in python-oauth2, an application for authorization flows for web applications, the nonce value generated isn't sufficiently random. While doing bulk operations the nonce might be repeated, so there is a chance of predictability. This could allow MITM attackers to conduct replay...

MGASA-2013-0314 Updated python-oauth2 packages fix CVE-2013-4347

It was found that in python-oauth2, an application for authorization flows for web applications, the nonce value generated isn't sufficiently random. While doing bulk operations the nonce might be repeated, so there is a chance of predictability. This could allow MITM attackers to conduct replay...

Oracle Linux 5 : kvm (ELSA-2012-0149)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0149 advisory. - CVE: CVE-2011-4622 - Resolves: bz770101 CVE-2011-4622 kernel: kvm: pit timer with no irqchip crashes the system rhel-5.8 - CVE: CVE-2012-0029 - Resolves:...

CVE-2011-4347

CVE-2011-4347 affects the Linux kernel KVM: kvm_vm_ioctl_assign_device in virt/kvm/assigned-dev.c fails to verify permissions for PCI config space and BAR resources, enabling a local attacker (host OS user) to assign PCI devices via KVM_ASSIGN_PCI_DEVICE and cause a host crash; fixed in Linux ker...

RHEL 5 : kvm (RHSA-2012:0149)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0149 advisory. - kernel: kvm: device assignment DoS CVE-2011-4347 Note that Nessus has not tested for this issue but has instead relied only on the application's...

RHEL 6 : kernel (RHSA-2012:1042)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1042 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

Fedora Update for kernel FEDORA-2012-20240

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-20240 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Symantec Messaging Gateway Directory Traversal (CVE-2012-4347)

Two directory traversal vulnerabilities exist in Symantec Messaging Gateway...

Symantec Messaging Gateway 9.5 Log File Download Vulnerability

This module will download a file of your choice against Symantec Messaging Gateway. This is possible by exploiting a directory traversal vulnerability when handling the 'logFile' parameter, which will load an arbitrary file as an attachment. Note that authentication is required in order to...

Fedora Update for kernel FEDORA-2012-17479

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-17479 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Symantec Messaging Gateway 9.5.x Multiple Vulnerabilities (SYM12-013)

According to its self-reported version number, the version of Symantec Messaging Gateway running on the remote host is 9.5.x and has the following vulnerabilities : - Multiple XSS vulnerabilities exist. CVE-2012-0307 - Lack of password protection on sensitive functions as well as of CSRF protecti...

Fedora Update for kernel FEDORA-2012-12684

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-12684 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for kernel FEDORA-2012-11348

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-11348 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for kernel FEDORA-2012-11348

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix various security issues and three bugs are now available for Red Hat Enterprise Linux 6.1 Extended Update Support. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Design/Logic Flaw

drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by leveraging root privileges to write to the /sys/kernel/debug/acpi/custommethod file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-4347...

Fedora Update for kernel FEDORA-2012-7594

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2012-7594 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...