VMSA-2013-0003 VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library security issues. (remote check)

The remote ESXi is missing one or more security related Updates from VMSA-2013-0003. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0003remote.nasl 6086 2017-05-09 09:03:30Z teissa $ VMSA-2013-0003 VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library...

AIX 6.1 TL 9 : bos.rte.filesystem (U854544)

The remote host is missing AIX PTF U854544, which is related to the security of the package bos.rte.filesystem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U854544. The text itself is copyright C...

Fedora Update for mediawiki FEDORA-2013-21874

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-6535

DjVuLibre before 3.5.25.3, as used in Evince, Sumatra PDF Reader, VuDroid, and other products, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted DjVu aka .djv file...

CVE-2012-6535

CVE-2012-6535 affects DjVuLibre before 3.5.25.3 (used by Evince, Sumatra PDF Reader, VuDroid and others). Root cause: memory corruption during DjVu file processing; impact: remote code execution or denial of service. Public details indicate exploitation via crafted DjVu files with no user interac...

CVE-2012-0420

zypp-refresh-wrapper in SUSE Zypper before 1.3.20 and 1.6.x before 1.6.166 allows local users to create files in arbitrary directories, or possibly have unspecified other impact, via a pathname in the ZYPPLOCKFILEROOT environment variable...

CVE-2012-0425

LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...

CVE-2012-0426

Race condition in sapsuseclusterconnector before 1.0.0-0.8.1 in SUSE Linux Enterprise for SAP Applications 11 SP2 allows local users to have an unspecified impact via vectors related to a tmp/ directory...

CVE-2012-0414

Cross-site scripting XSS vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise SLE 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name...

CVE-2012-0414

The CVE-2012-0414 entry concerns a Cross-site scripting (XSS) vulnerability in the Spacewalk service of SUSE Manager 1.2 for SUSE Linux Enterprise 11 SP1. The issue allows remote attackers to inject arbitrary web script or HTML via an image name. According to the linked references, the vulnerabil...

CVE-2012-0426

CVE-2012-0426 affects the SAP SUSE cluster connector: a race condition in the module before version 1.0.0-0.8.1 used with SUSE Linux Enterprise for SAP Applications 11 SP2 . The issue allows local users to cause an unspecified impact via vectors related to a tmp/ directory. The provided documents...

CVE-2012-0427

CVE-2012-0427 affects yast2-add-on-creator in SUSE inst-source-utils; local users can gain privileges via crafted (1) file name or (2) directory name. Root cause: inadequate validation in inst-source-utils prior to 0.9.1 (2008.11.26) and 0.8.1 (2012.9.13). Impact: local privilege escalation (CVE ...

CVE-2012-0434

The CVE concerns the Crowbar server used in SUSE Cloud 1.0, where the production.log file has weak permissions. The available connected documents confirm the affected component and the root cause (inappropriate permissions on production.log). The impact is not specified in the provided materials,...

CVE-2012-0425

CVE-2012-0425 affects SUSE YaST, specifically LanItems.ycp in save_y2logs of yast2-network, where before version 2.24.4 the log file y2log can contain cleartext Wi‑Fi credentials. The fields (1) WIRELESS_WPA_PASSWORD and (2) WIRELESS_CLIENT_KEY_PASSWORD may be read by context-dependent attackers,...

CVE-2012-0420

The CVE-2012-0420 issue affects SUSE Zypper’s zypp-refresh-wrapper; local users could create files in arbitrary directories, or suffer other unspecified impact, via the ZYPP_LOCKFILE_ROOT environment variable. Affected versions include Zypper before 1.3.20 and 1.6.x before 1.6.166. The root cause...

OP5 welcome Remote Command Execution (CVE-2012-0262)

An arbitrary commands execution vulnerability has been reported in OP5 appliances...

Low: augeas

Issue Overview: Multiple flaws were found in the way Augeas handled configuration files when updating them. An application using Augeas to update configuration files in a directory that is writable to by a different user for example, an application running as root that is updating files in a...

[ MDVSA-2013:284 ] glibc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2013:284 http://www.mandriva.com/en/support/security/ Package : glibc Date : November 25, 2013 Affected: Enterprise Server 5.0 Problem Description: Multiple vulnerabilities was found and corrected in glibc: Integ...

GLSA-201311-19 : rssh: Access restriction bypass

The remote host is affected by the vulnerability described in GLSA-201311-19 rssh: Access restriction bypass Multiple command line parsing and validation vulnerabilities have been discovered in rssh. Please review the CVE identifiers referenced below for details. Impact : Multiple parsing and...

Unbreakable Enterprise Kernel security update

2.6.39-400.211.2 - fs/compatioctl.c: VIDEOSETSPUPALETTE missing error check Kees Cook Orabug: 17842208 CVE-2013-1928 - Bluetooth: RFCOMM - Fix info leak via getsockname Mathias Krause Orabug: 17842129 CVE-2012-6545 - Bluetooth: RFCOMM - Fix info leak in ioctlRFCOMMGETDEVLIST Mathias Krause Orabug...