Mozilla updates 2013/12 (important)

This patch contains mozilla-nss 3.15.3.1 which includes a certstore update 1.95 to explicitely revoke AC DG Tresor SSL intermediate CA which was misused. Firefox 24.2esr Thunderbird 24.2 Seamonkey 2.23 These updates fix several security issues: CVE-2013-5611 Mozilla: Application Installation...

Mozilla Firefox WEB应用安装持久Doorhanger通知漏洞

CVECAN ID: CVE-2013-5611 Mozilla Firefox是Mozilla所发布的WEB浏览器。 Mozilla Firefox没有正确删除应用安装doorhanger，允许攻击者利用漏洞构建恶意WEB页，诱使用户解析，通过控制页面导航时序来伪造应用程序安装站点。 0 Mozilla Firefox 26 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/security/...

CVE-2013-5611

Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation...

CVE-2013-5611

CVE-2013-5611 refers to Mozilla Firefox (pre-26.0) where an App Installation doorhanger isn’t properly removed, enabling a remote attacker to spoof a Web App installation site by timing page navigation. Connected sources confirm affected products and fixes: IBM/SONAS and IBM Storwize advisories l...

Fedora Update for mysql FEDORA-2013-19648

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2581-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : mysql55 (ALAS-2012-144)

A stack-based buffer overflow flaw was found in the user permission checking code in MySQL. An authenticated database user could use this flaw to crash the mysqld daemon or, potentially, execute arbitrary code with the privileges of the user running the mysqld daemon. CVE-2012-5611 C Tenable...

Amazon Linux AMI : mysql51 (ALAS-2012-145)

A stack-based buffer overflow flaw was found in the user permission checking code in MySQL. An authenticated database user could use this flaw to crash the mysqld daemon or, potentially, execute arbitrary code with the privileges of the user running the mysqld daemon. CVE-2012-5611 C Tenable...

Oracle Linux 6 : mysql (ELSA-2012-1551)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1551 advisory. 5.1.66-2 - Add backported patch for CVE-2012-5611 Resolves: CVE-2012-5611 Tenable has extracted the preceding description block directly from the Oracle Linux...

Mandriva Linux Security Advisory : mariadb (MDVSA-2013:102)

Updated mariadb packages includes fixes for the following security vulnerabilities : Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client CVE-2012-3147. Unspecified...

Security fix for the ALT Linux 8 package mariadb version April

April 1, 2013 Michael Shigorin 5.5.30-alt10 - New version - NB: 5.5.29 had important security fixes, including: + A buffer overflow that can cause a server crash or arbitrary code execution a variant of CVE-2012-5611 + CVE-2012-5627 fast password brute-forcing using the "change user" +...

openSUSE: Security Advisory for mariadb (openSUSE-SU-2013:0014-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for mysql-community-server (openSUSE-SU-2013:0013-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for mysql-community-server openSUSE-SU-2013:0013-1 (mysql-community-server)

Check for the Version of mysql-community-server OpenVAS Vulnerability Test $Id: gbsuse201300131.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for mysql-community-server openSUSE-SU-2013:0013-1 mysql-community-server Authors: System Generated Check Copyright: Copyright c 2013 Greenbone...

MariaDB 5.1.0 < 5.1.67 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.1.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.1.67 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

MariaDB 5.2.0 < 5.2.14 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.2.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.2.14 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

SuSE 11.2 Security Update : MySQL (SAT Patch Number 7251)

A stack-based buffer overflow in MySQL has been fixed that could have caused a Denial of Service or potentially allowed the execution of arbitrary code. CVE-2012-5611 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Su...

CentOS Update for mysql CESA-2013:0180 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for mysql RHSA-2013:0180-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1703-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...