Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : samba vulnerabilities (USN-839-1)

J. David Hester discovered that Samba incorrectly handled users that lack home directories when the automated homes share is enabled. An authenticated user could connect to that share name and gain access to the whole filesystem. CVE-2009-2813 Tim Prouty discovered that the smbd daemon in Samba...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : openssl vulnerability (USN-830-1)

Dan Kaminsky discovered OpenSSL would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation. Note that...

Ubuntu USN-820-1 (pidgin)

The remote host is missing an update to pidgin announced via advisory USN-820-1. OpenVAS Vulnerability Test $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8201.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-820-1 pidgin Authors: Thomas Rein...

Ubuntu USN-812-1 (subversion)

The remote host is missing an update to subversion announced via advisory USN-812-1. OpenVAS Vulnerability Test $Id: ubuntu8121.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8121.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-812-1 subversion Authors:...

Ubuntu: Security Advisory (USN-813-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS : apache2 vulnerability (USN-813-2)

USN-813-1 fixed vulnerabilities in apr. This update provides the corresponding updates for apr as provided by Apache on Ubuntu 6.06 LTS. Matt Lewis discovered that apr did not properly sanitize its input when allocating memory. If an application using apr processed crafted input, a remote attacke...

USN-813-2: Apache vulnerability

USN-813-1 fixed vulnerabilities in apr. This update provides the corresponding updates for apr as provided by Apache on Ubuntu 6.06 LTS. Original advisory details: Matt Lewis discovered that apr did not properly sanitize its input when allocating memory. If an application using apr processed...

USN-812-1: Subversion vulnerability

Matt Lewis discovered that Subversion did not properly sanitize its input when processing svndiff streams, leading to various integer and heap overflows. If a user or automated system processed crafted input, a remote attacker could cause a denial of service or potentially execute arbitrary code ...

Ubuntu: Security Advisory (USN-806-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-803-1 (dhcp3)

The remote host is missing an update to dhcp3 announced via advisory USN-803-1. OpenVAS Vulnerability Test $Id: ubuntu8031.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8031.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-803-1 dhcp3 Authors: Thomas Reinke...

USN-806-1: Python vulnerabilities

It was discovered that Python incorrectly handled certain arguments in the imageop module. If an attacker were able to pass specially crafted arguments through the crop function, they could execute arbitrary code with user privileges. For Python 2.5, this issue only affected Ubuntu 8.04 LTS...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : ruby1.8, ruby1.9 vulnerabilities (USN-805-1)

It was discovered that Ruby did not properly validate certificates. An attacker could exploit this and present invalid or revoked X.509 certificates. CVE-2009-0642 It was discovered that Ruby did not properly handle string arguments that represent large numbers. An attacker could exploit this and...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : dbus vulnerability (USN-799-1)

It was discovered that the D-Bus library did not correctly validate signatures. If a local user sent a specially crafted D-Bus key, they could spoof a valid signature and bypass security policies. Note that Tenable Network Security has extracted the preceding description block directly from the...

CVE-2009-2324

Multiple cross-site scripting XSS vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples aka samples directory...

Ubuntu USN-789-1 (gst-plugins-good0.10)

The remote host is missing an update to gst-plugins-good0.10 announced via advisory USN-789-1. OpenVAS Vulnerability Test $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-789-1...

Ubuntu: Security Advisory (USN-775-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-785-1 (ipsec-tools)

The remote host is missing an update to ipsec-tools announced via advisory USN-785-1. OpenVAS Vulnerability Test $Id: ubuntu7851.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7851.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-785-1 ipsec-tools Authors:...

USN-787-1: Apache vulnerabilities

Matthew Palmer discovered an underflow flaw in apr-util as included in Apache. An attacker could cause a denial of service via application crash in Apache using a crafted SVNMasterURI directive, .htaccess file, or when using modapreq2. This issue only affected Ubuntu 6.06 LTS. CVE-2009-0023 Sande...

Ubuntu USN-766-1 (acpid)

The remote host is missing an update to acpid announced via advisory USN-766-1. OpenVAS Vulnerability Test $Id: ubuntu7661.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7661.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-766-1 acpid Authors: Thomas Reinke...

Ubuntu USN-778-1 (cron)

The remote host is missing an update to cron announced via advisory USN-778-1. OpenVAS Vulnerability Test $Id: ubuntu7781.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7781.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-778-1 cron Authors: Thomas Reinke...