Oracle Linux 6 : kernel (ELSA-2012-1426)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1426 advisory. - mm hugetlb: do not use vmahugecacheoffset for vmapriotreeforeach Frederic Weisbecker 843034 843035 CVE-2012-2133 - mm hugepages: fix use after free b...

Oracle Linux 6 : polkit (ELSA-2011-0455)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0455 advisory. - Include fixes for CVE-2011-1485 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

Oracle Linux 5 / 6 : firefox (ELSA-2012-1088)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1088 advisory. firefox 10.0.6-1.0.1.el63 - Replace firefox-redhat-default-prefs.js with firefox-oracle-default-prefs.js 10.0.6-1 - Update to 10.0.6 ESR 10.0.5-3 -...

Oracle Linux 6 : squid (ELSA-2011-1791)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2011-1791 advisory. -7:3.1.10-1.el62.1 - Resolves: 755016 - CVE-2011-4096: Invalid free by processing CNAME DNS record Tenable has extracted the preceding description block directl...

Oracle Linux 6 : kernel (ELSA-2013-0744)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0744 advisory. - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - virt kvm: do not GP on unaligned MSRKVMSYSTEMTIME writ...

Oracle Linux 6 : spice-xpi (ELSA-2011-0426)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-0426 advisory. - Fix security vulnerability CVE-2011-0012 rhbz639869 Resolves: rhbz639870 Tenable has extracted the preceding description block directly from the Orac...

Oracle Linux 6 : pixman (ELSA-2013-0687)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0687 advisory. 0.26.2-5 - Fix bug 914474 CVE 2013-1591 - Remove openmp.patch Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 : evince (ELSA-2011-0009)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0009 advisory. - Fixes CVE-2010-2640, CVE-2010-2641, CVE-2010-2642 and CVE-2010-2643 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2012-1386)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1386 advisory. 1.7.0.9-2.3.3.0.1.el63.1 - Update DISTRONAME in specfile 1.7.0.9-2.3.3.el6.1 - Changed permissions of sa-jdi.jar to correct 644 - Resolves: rhbz865050...

Oracle Linux 6 : kernel (ELSA-2013-0630)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0630 advisory. - kernel utrace: ensure archptrace/ptracerequest can never race with SIGKILL Oleg Nesterov 912073 912074 CVE-2013-0871 - x86 msr: Add capabilities chec...

Oracle Linux 6 : glibc (ELSA-2011-0413)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0413 advisory. - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 Tenable has extracted the preceding...

Oracle Linux 6 : krb5 (ELSA-2011-0200)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0200 advisory. - add upstream patches to fix standalone kpropd exiting if the per-client child process exits with an error, and hang or crash in the KDC when using th...

Oracle Linux 6 : openssl (ELSA-2011-1409)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1409 advisory. 1.0.0-10.5 - initialize the X509STORECTX properly for CRL lookups - CVE-2011-3207 736087 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : 389-ds-base (ELSA-2013-0742)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0742 advisory. 1.2.11.15-14 - Resolves: Bug 929107 - ns-slapd crashes sporadically with segmentation fault in libslapd.so ticket 627 - Resolves: Bug 929114 - cleanAllRUV task...

CVE-2013-2051

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...

CVE-2013-2051

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...

CVE-2013-2051

The Tomcat 6 DIGEST authentication functionality as used in Red Hat Enterprise Linux 6 allows remote attackers to bypass intended access restrictions by performing a replay attack after a nonce becomes stale. NOTE: this issue is due to an incomplete fix for CVE-2012-5887...

CVE-2013-2051

Removed by vendor...

CVE-2013-2051

CVE-2013-2051 describes a replay-attack bypass in Tomcat 6 Digest authentication when a nonce becomes stale, due to an incomplete fix for CVE-2012-5887. The vulnerability allows remote attackers to bypass access restrictions by replaying valid requests after nonce expiration. Affected product: Ap...

CentOS Update for java CESA-2013:1014 centos5

Check for the Version of java OpenVAS Vulnerability Test CentOS Update for java CESA-2013:1014 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...