20292 matches found
xinetd security and bug fix update
2:2.3.14-19 - Correctly backport patches that fix the descriptor leakage - Related: 852274 -2:2.3.14-18 - Fix leaking file descriptors 852274 - Fix: Service disabled due to bind failure 811000 - CVE-2012-0862 xinetd: enables unintentional services over tcpmux port 788795...
CVE-2012-2126
CVE-2012-2126 affects RubyGems prior to 1.8.23, where SSL certificate verification is not performed, enabling an attacker to perform a MITM attack to modify a gem during installation. Public references indicate the issue is addressed by upgrading RubyGems (e.g., to 1.8.23 or later) in affected en...
CVE-2012-2125
CVE-2012-2125 affects RubyGems prior to 1.8.23, where HTTPS connections could be redirected to HTTP, enabling a remote attacker to observe or modify a gem during installation via a man‑in‑the‑middle. The accompanying open‑source advisories and OS patch references document this issue across multip...
CVE-2012-5627
CVE-2012-5627 affects Oracle MySQL and MariaDB where the salt is not changed during multiple executions of the CHANGE_USER command within the same MySQL/MariaDB connection. This allows remote authenticated users to more easily brute-force passwords. Affected versions include MySQL/MariaDB: 5.5.x ...
CVE-2012-2125
RubyGems before 1.8.23 can redirect HTTPS connections to HTTP, which makes it easier for remote attackers to observe or modify a gem during installation via a man-in-the-middle attack...
CVE-2012-3323
CVE-2012-3323 affects IBM Maximo Asset Management and related Maximo products: 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3. The vulnerability allows remote attackers to gain privileges via unspecified vectors (CVSS v2 base score 6.8, vector AV:N/AC:M/Au:N/C:P/I:P/A:P). IBM’s sec...
Fedora 20 : xpdf-3.03-8.fc20 (2013-17398)
Fix icon issue in desktop file. Resolve CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
RHEL 5 : xinetd (RHSA-2013:1302)
An updated xinetd package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Fedora 18 : xpdf-3.03-8.fc18 (2013-17375)
Fix icon issue in desktop file. Resolve CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
CVE-2012-4096
The CVE-2012-4096 issue affects Cisco UCS BMC local file editor. Affected product: Cisco Unified Computing System BMC. Description in Cisco advisory and Red Hat/NVD entries confirms that an authenticated, local attacker can modify arbitrary files on the fabric interconnect by abusing the local fi...
HP Onboard Administrator < 3.50 Multiple Security Vulnerabilities
HP Onboard Administrator is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora 19 : xpdf-3.03-8.fc19 (2013-17397)
Fix icon issue in desktop file. Resolve CVE-2012-2142 poppler, xpdf: Insufficient sanitization of escape sequences in the error messages Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Moderate: Red Hat Security Advisory: php53 security, bug fix and enhancement update
Updated php53 packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...
Low: Red Hat Security Advisory: xinetd security and bug fix update
An updated xinetd package that fixes one security issue and two bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Fedora 19 : zabbix-2.0.6-3.fc19 (2013-14029)
This update solves a security issue involving the use of libcurl in the code used to access the eztexting service. It potentially allows for man-in-the-middle attacks. The issue was described as CVE-2012-6086. Please refer to https://support.zabbix.com/browse/ZBX-5924 for details! Note that Tenab...
Oracle Linux 5 : kernel (ELSA-2013-1292)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1292 advisory. - kernel signals: stop info leak via tkill and tgkill syscalls Oleg Nesterov 970874 970875 CVE-2013-2141 - net ipv6: do udppushpendingframes AFINET soc...
IBM Tivoli NetView for z/OS Privilege Escalation
The remote host appears to have IBM Tivoli NetView installed that is affected by a privilege escalation vulnerability. A Unix System Services authenticated attacker may be able to gain the privileges of the NetView application. Note that Nessus has not tested for the issues, but instead has relie...
CVE-2012-4092
CVE-2012-4092 affects Cisco UCS Central Software’s management interface, where improper validation of vCenter console identities enables MITM-style interception—read/modify inter-device data streams. Root cause: identity spoofing between vCenter consoles and UCS Manager. Impact is partial confide...
kernel security and bug fix update
kernel 2.6.18-348.18.1 - net be2net: enable polling prior enabling interrupts globally Ivan Vecera 1005239 987539 - kernel signals: stop info leak via tkill and tgkill syscalls Oleg Nesterov 970874 970875 CVE-2013-2141 - net ipv6: do udppushpendingframes AFINET sock pending data Jiri Benc 987647...