Thecus NAS Server N8800信息泄露漏洞

CVECAN ID: CVE-2013-5669 Thecus NAS server N8800是一款网络接入服务器设备。 Thecus NAS server N8800（固件版本5.03.01）对管理员身份验证使用了纯文本的凭证，这可使远程攻击者通过嗅探网络获取敏感信息。 0 thecus NAS Server N8800 5.03.01 厂商补丁： thecus ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.thecus.com/ http://www.7elements.co.uk/news/cve-2013-5669...

CVE-2013-5669

The Thecus NAS server N8800 (firmware 5.03.01) uses cleartext credentials for administrative authentication, allowing remote attackers to sniff passwords over the network (CVE-2013-5669). Multiple sources confirm the issue; vendor has released firmware updates (ThecusOS 5.03.02.x and related 64‑b...

Thecus NAS Server N8800 contains multiple vulnerabilities

Overview Thecus NAS server N8800 with firmware version 5.03.01, and possibly earlier versions, contains multiple vulnerabilities. Description The 7 Elements advisory states that the Thecus NAS server N8800 device contains the following vulnerabilities:CVE-2013-5667 - Thecus NAS Server N8800...

Amazon Linux AMI : freetype (ALAS-2013-150)

A flaw was found in the way the FreeType font rendering engine processed certain Glyph Bitmap Distribution Format BDF fonts. If a user loaded a specially crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute arbitrary code wit...

Oracle Linux 5 / 6 : freetype (ELSA-2013-0216)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0216 advisory. - Fix CVE-2012-5669 Use correct array size for checking 'glyphenc' - Add freetype-2.3.11-CVE-2011-3439.patch Various loading fixes. - Add...

Fedora Update for freetype FEDORA-2013-1466

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : freetype2 (MDVSA-2013:006)

Multiple vulnerabilities has been found and corrected in freetype2 : A NULL pointer de-reference flaw was found in the way Freetype font rendering engine handled Glyph bitmap distribution format BDF fonts. A remote attacker could provide a specially crafted BDF font file, which once processed in ...

Fedora Update for freetype FEDORA-2013-1492

Check for the Version of freetype OpenVAS Vulnerability Test Fedora Update for freetype FEDORA-2013-1492 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for freetype FEDORA-2013-1492

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : freetype-2.4.10-3.fc18 (2013-1492)

This update fixes CVE-2012-5669. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

RedHat Update for freetype RHSA-2013:0216-01

Check for the Version of freetype OpenVAS Vulnerability Test RedHat Update for freetype RHSA-2013:0216-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for freetype CESA-2013:0216 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for freetype RHSA-2013:0216-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Important: freetype

Issue Overview: A flaw was found in the way the FreeType font rendering engine processed certain Glyph Bitmap Distribution Format BDF fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute...

RHEL 5 / 6 : freetype (RHSA-2013:0216)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0216 advisory. - freetype: heap buffer over-read in BDF parsing bdfparseglyphs 37906 CVE-2012-5669 Note that Nessus has not tested for this issue but has instea...

CVE-2012-5669

The bdfparseglyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read...

CVE-2012-5669

The bdfparseglyphs function in FreeType before 2.4.11 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to BDF fonts and an incorrect calculation that triggers an out-of-bounds read...

CVE-2012-5669

CVE-2012-5669 affects the FreeType library: the function _bdf_parse_glyphs in FreeType before 2.4.11 can be triggered via BDF fonts, due to an incorrect calculation, causing an out-of-bounds read that may lead to denial of service (crash) and possibly arbitrary code execution. Connected advisorie...

freetype

New freetype packages are available for Slackware 12.1, 12.2, 13.0, 13.1, 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/freetype-2.4.11-i486-1slack14.0.txz: Upgraded. This release fixes several security bugs that could...

[USN-1686-1] FreeType vulnerabilities

========================================================================== Ubuntu Security Notice USN-1686-1 January 14, 2013 freetype vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: ...