Ubuntu 6.06 LTS : elinks vulnerabilities (USN-851-1)

Teemu Salmela discovered that Elinks did not properly validate input when processing smb:// URLs. If a user were tricked into viewing a malicious website and had smbclient installed, a remote attacker could execute arbitrary code with the privileges of the user invoking the program. CVE-2006-5925...

Ubuntu 6.06 LTS : devscripts vulnerability (USN-847-2)

USN-847-1 fixed vulnerabilities in devscripts. This update provides the corresponding updates for Ubuntu 6.06 LTS. Raphael Geissert discovered that uscan, a part of devscripts, did not properly sanitize its input when processing pathnames. If uscan processed a crafted filename for a file on a...

Ubuntu wget vulnerability

It was discovered that Wget did not correctly handle SSL certificates with zero bytes in the Common Name. A remote attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : samba vulnerabilities (USN-839-1)

J. David Hester discovered that Samba incorrectly handled users that lack home directories when the automated homes share is enabled. An authenticated user could connect to that share name and gain access to the whole filesystem. CVE-2009-2813 Tim Prouty discovered that the smbd daemon in Samba...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : openssl vulnerability (USN-830-1)

Dan Kaminsky discovered OpenSSL would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation. Note that...

Ubuntu USN-820-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory USN-820-1. OpenVAS Vulnerability Test $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-820-1 pidgin Authors: Thomas Rein...

Ubuntu USN-812-1 (subversion)

The remote host is missing an update to subversion announced via advisory USN-812-1. OpenVAS Vulnerability Test $Id: ubuntu8121.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8121.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-812-1 subversion Authors:...

Ubuntu 6.06 LTS : apache2 vulnerability (USN-813-2)

USN-813-1 fixed vulnerabilities in apr. This update provides the corresponding updates for apr as provided by Apache on Ubuntu 6.06 LTS. Matt Lewis discovered that apr did not properly sanitize its input when allocating memory. If an application using apr processed crafted input, a remote attacke...

Ubuntu USN-803-1 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory USN-803-1. OpenVAS Vulnerability Test $Id: ubuntu8031.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8031.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-803-1 dhcp3 Authors: Thomas Reinke...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : ruby1.8, ruby1.9 vulnerabilities (USN-805-1)

It was discovered that Ruby did not properly validate certificates. An attacker could exploit this and present invalid or revoked X.509 certificates. CVE-2009-0642 It was discovered that Ruby did not properly handle string arguments that represent large numbers. An attacker could exploit this and...

CVE-2009-2324

Multiple cross-site scripting XSS vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples aka samples directory...

Ubuntu USN-789-1 (gst-plugins-good0.10)

The remote host is missing an update to gst-plugins-good0.10 announced via advisory USN-789-1. OpenVAS Vulnerability Test $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-789-1...

Ubuntu USN-785-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory USN-785-1. OpenVAS Vulnerability Test $Id: ubuntu7851.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7851.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-785-1 ipsec-tools Authors:...

Ubuntu USN-766-1 (acpid)

The remote host is missing an update to acpid announced via advisory USN-766-1. OpenVAS Vulnerability Test $Id: ubuntu7661.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7661.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-766-1 acpid Authors: Thomas Reinke...

Ubuntu USN-778-1 (cron)

The remote host is missing an update to cron announced via advisory USN-778-1. OpenVAS Vulnerability Test $Id: ubuntu7781.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7781.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-778-1 cron Authors: Thomas Reinke...

Ubuntu 6.06 LTS : gaim vulnerabilities (USN-781-2)

It was discovered that Gaim did not properly handle certain malformed messages when sending a file using the XMPP protocol handler. If a user were tricked into sending a file, a remote attacker could send a specially crafted response and cause Gaim to crash, or possibly execute arbitrary code wit...

CVE-2009-1828

Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service infinite loop, application hang, and memory consumption via a KEYGEN element in conjunction with 1 a META element specifying automatic page refresh or 2 a JavaScript onLoad event handler for a BODY element. NOTE: it was...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : ntp vulnerabilities (USN-777-1)

A stack-based buffer overflow was discovered in ntpq. If a user were tricked into connecting to a malicious ntp server, a remote attacker could cause a denial of service in ntpq, or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-0159 Chris Ries...

Ubuntu 6.06 LTS / 7.10 : imagemagick vulnerability (USN-681-1)

It was discovered that ImageMagick did not correctly handle certain malformed XCF images. If a user were tricked into opening a specially crafted image with an application that uses ImageMagick, an attacker could cause a denial of service and possibly execute arbitrary code with the user's...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : nss, firefox vulnerability (USN-740-1)

The MD5 algorithm is known not to be collision resistant. This update blacklists the proof of concept rogue certificate authority as discussed in http://www.win.tue.nl/hashclash/rogue-ca/. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...