Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2013-0246)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0246 advisory. 1:1.6.0.0-1.33.1.11.6.0.1.el59 - Add oracle-enterprise.patch 1:1.6.0.0-1.33.1.11.6 - removed patch9 revertTwoWrongSecurityPatches2013-02-06.patch - add...

Oracle Linux 5 / 6 : firefox (ELSA-2011-0310)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0310 advisory. firefox: 3.6.14-4.0.1.el60 - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js 3.6.14-4 - Update to build3 3.6.14-3...

Oracle Linux 5 : firefox (ELSA-2010-0782)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0782 advisory. firefox: 3.6.11-2.0.1.el5 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones...

Oracle Linux 5 : rdesktop (ELSA-2008-0575)

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2008-0575 advisory. 1.4.1-6 - Update the prototype for xrealloc as well. - Fix bug 452978, cve-2008-1803 - Fix bug 452978, cve-2008-1801 Tenable has extracted the precedin...

Oracle Linux 5 : php53 (ELSA-2012-1047)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1047 advisory. - add security fix for CVE-2010-2950 - fix tests for CVE-2012-2143, CVE-2012-0789 - add security fix for CVE-2012-2336 Tenable has extracted the...

Oracle Linux 5 : cups (ELSA-2009-1513)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1513 advisory. - Include NULL pointer check in ObjectStream::getObject. Part of the fix for CVE-2009-3608 bug 526637. Tenable has extracted the preceding description...

Oracle Linux 6 : axis (ELSA-2013-0269)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0269 advisory. 0:1.2.1-7.3 - Add missing connection hostname check against X.509 certificate name - Resolves: CVE-2012-5784 Tenable has extracted the preceding description blo...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2007)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2007 advisory. - regset: Return -EFAULT, not -EIO, on host-side memory fault H. Peter Anvin CVE-2012-1097 - regset: Prevent null pointer reference on readonly...

Oracle Linux 5 : Important: / krb5 (ELSA-2007-0858)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0858 advisory. 1.5-28 - add preliminary patch to fix buffer overflow in rpcsecgss implementation in libgssrpc 250973, CVE-2007-3999 and write through uninitialized...

Oracle Linux 5 : tog-pegasus (ELSA-2008-1001)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-1001 advisory. 2.7.0-2.0.1.el52.1 - Added pegasus-enterprise.patch to allow detection of enterprise-release 2.7.0-2.el52.1 - Fix local-or-remote-auth patch and enhanc...

Oracle Linux 6 : icedtea-web (ELSA-2011-1100)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1100 advisory. 1.0.4-2 - Added patch to make plugin table size mismatch a warning instead of error 1.0.4-1 - Bump to 1.0.4 - Resolves rhbz718180 Tenable has extracted...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2012-1222)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1222 advisory. 1.6.0.0-1.28.1.10.9.0.1.el58 - Add oracle-enterprise.patch 1:1.6.0.0-1.28.1.10.9 - Updated to latest IcedTea6 1.10.9 - Resolves: rhbz846709 - Resolves:...

RHEL 6 : java-1.6.0-openjdk (RHSA-2013:0605)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0605 advisory. - OpenJDK: Specially crafted sample model integer overflow 2D, 8007014 CVE-2013-0809 - OpenJDK: CMM malformed raster memory corruption 2D,...

RHEL 5 : flash-plugin (RHSA-2010:0623)

The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0623 advisory. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple...

RHEL 5 : java-1.4.2-ibm (RHSA-2008:0955)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0955 advisory. - Java RE allows Same Origin Policy to be Bypassed 6687932 CVE-2008-3104 - Java Web Start, arbitrary file creation 6703909 CVE-2008-3112 -...

OpenCms (7.5.0) - Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error

Application: OpenCms Version: 7.5.0 Hardware: Tomcat/Oracle Vulnerability: Cross-Site Scripting, Phishing Through Frames, Application Error Overview: Various URL's within the deployed OpenCms application version 7.5.0 are open to attacks, including Cross-Site Scripting, Phishing Through Frames an...

RHEL 4 : xorg-x11 (RHSA-2008:0503)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0503 advisory. - X.org Record and Security extensions memory corruption CVE-2008-1377 - X.org MIT-SHM extension arbitrary memory read CVE-2008-1379 - X.org...

RHEL 5 : cups (RHSA-2007:1020)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:1020 advisory. - cups boundary error CVE-2007-4351 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Nmap advanced usage guide-vulnerability warning-the black bar safety net

Now with Nmap when HOU found Nmap tips Happy 10th Birthday to Nmap, may it live to be 1 1 0! It's been 1 0 years old birthday, perhaps you can can live to be 1 1 0 years olddidn't think 9 7 years 9 months 1 day it was born the day of 1 0 years of grinding sword. In honor of this great port scanne...

CenterICQ IJHook.CC远程缓冲区溢出漏洞

CenterICQ包含对LiveJournal的支持，如张贴日记，读取其他BLOG的RSS种子等其他功能。 CenterICQ存在缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于SOURCE/src/hooks/ljhook.cc文件中： char buf512; ... iffindfriendof.begin, friendof.end, in-first == friendof.end friendof.pushbackin-first; if!foempty bd = string "http://" +...