CVE-2012-1016

The pkinitserverreturnpadata function in plugins/preauth/pkinit/pkinitsrv.c in the PKINIT implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.10.4 attempts to find an agility KDF identifier in inappropriate circumstances, which allows remote attackers to cause a...

CVE-2013-1415

The pkinitcheckkdcpkid function in plugins/preauth/pkinit/pkinitcryptoopenssl.c in the PKINIT implementation in the Key Distribution Center KDC in MIT Kerberos 5 aka krb5 before 1.10.4 and 1.11.x before 1.11.1 does not properly handle errors during extraction of fields from an X.509 certificate,...

CVE-2012-1016

CVE-2012-1016 affects MIT Kerberos 5 PKINIT in the KDC, where pkinit_server_return_padata may mis-handle an agility KDF check under crafted Draft 9 requests, enabling a remote attacker to trigger a NULL pointer dereference and daemon crash (DoS). Affected: krb5 PKINIT prior to version 1.10.4. Mit...

PHP-Fusion 7.02.05 XSS / LFI / SQL Injection

waraxe-2013-SA097 - Multiple Vulnerabilities in PHP-Fusion 7.02.05 =============================================================================== Author: Janek Vind "waraxe" Date: 27. February 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-97.html Description of vulnerable...

PHP-Fusion 7.02.05 - Multiple Vulnerabilities

PHP-Fusion 7.02.05 - Multiple Vulnerabilities waraxe-2013-SA097 - Multiple Vulnerabilities in PHP-Fusion 7.02.05 =============================================================================== Author: Janek Vind "waraxe" Date: 27. February 2013 Location: Estonia, Tartu Web:...

RHEL 5 / 6 : libxml2 (RHSA-2013:0581)

Updated libxml2 packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

CentOS 5 / 6 : dbus-glib (CESA-2013:0568)

Updated dbus-glib packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

[SECURITY] Fedora 18 Update: nss-3.14.3-1.fc18

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

RHEL 5 / 6 : dbus-glib (RHSA-2013:0568)

Updated dbus-glib packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

CVE-2012-2697

Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux RHEL 5, allows local users to cause a denial of service autofs crash and delayed mounts or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."...

Design/Logic Flaw

Unspecified vulnerability in autofs, as used in Red Hat Enterprise Linux RHEL 5, allows local users to cause a denial of service autofs crash and delayed mounts or prevent "mount expiration" via unspecified vectors related to "using an LDAP-based automount map."...

CVE-2012-2697

CVE-2012-2697 concerns an unspecified vulnerability in autofs used by RHEL 5 and related systems. The issue is triggered via LDAP-based automount maps and can allow local users to cause an autofs crash with denial of service or delay mounts, potentially preventing mount expiration. The available ...

[SECURITY] Fedora 18 Update: boost-1.50.0-5.fc18

Boost provides free peer-reviewed portable C++ source libraries. The emphasis is on libraries which work well with the C++ Standard Library, in the hopes of establishing "existing practice" for extensions and providing reference implementations so that the Boost libraries are suitable for eventua...

CentOS Update for java CESA-2013:0274 centos5

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:0274 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Oracle Java SE Multiple Vulnerabilities -02 Feb 13 (Windows)

This host is installed with Oracle Java SE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodoraclejavasemultvuln02feb13win.nasl 28074 2013-02-22 13:41:39Z feb$ Oracle Java SE Multiple Vulnerabilities -02 Feb 13 Windows Authors: Arun Kallavi Copyright: Copyright c 20...

CentOS Update for thunderbird CESA-2013:0272 centos5

Check for the Version of thunderbird OpenVAS Vulnerability Test CentOS Update for thunderbird CESA-2013:0272 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CentOS Update for devhelp CESA-2013:0271 centos5

Check for the Version of devhelp OpenVAS Vulnerability Test CentOS Update for devhelp CESA-2013:0271 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

RHEL 5 / 6 : acroread (RHSA-2013:0551)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0551 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. This update fixes two security flaws in Adobe...

CentOS Update for java CESA-2013:0275 centos5

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:0275 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for jakarta-commons-httpclient CESA-2013:0270 centos5

Check for the Version of jakarta-commons-httpclient OpenVAS Vulnerability Test CentOS Update for jakarta-commons-httpclient CESA-2013:0270 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...