Amazon Linux AMI : openssl (ALAS-2012-85)

An integer underflow flaw, leading to a buffer over-read, was found in the way OpenSSL handled DTLS Datagram Transport Layer Security application data record lengths when using a block cipher in CBC cipher-block chaining mode. A malicious DTLS client or server could use this flaw to crash its DTL...

Amazon Linux AMI : bind (ALAS-2012-84)

A flaw was found in the way BIND handled zero length resource data records. A malicious owner of a DNS domain could use this flaw to create specially crafted DNS resource records that would cause a recursive resolver or secondary server to crash or, possibly, disclose portions of its memory...

Amazon Linux AMI : glibc (ALAS-2012-109)

Multiple errors in glibc's formatted printing functionality could allow an attacker to bypass FORTIFYSOURCE protections and execute arbitrary code using a format string flaw in an application, even though these protections are expected to limit the impact of such flaws to an application abort. C...

Amazon Linux AMI : mysql51 (ALAS-2012-145)

A stack-based buffer overflow flaw was found in the user permission checking code in MySQL. An authenticated database user could use this flaw to crash the mysqld daemon or, potentially, execute arbitrary code with the privileges of the user running the mysqld daemon. CVE-2012-5611 C Tenable...

Amazon Linux AMI : mysql51 (ALAS-2012-92)

A flaw was found in the way MySQL processed HANDLER READ NEXT statements after deleting a record. A remote, authenticated attacker could use this flaw to provide such requests, causing mysqld to crash. This issue only caused a temporary denial of service, as mysqld was automatically restarted aft...

RedHat Update for kernel RHSA-2013:1173-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2013:1173-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for glibc FEDORA-2013-15316

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Irfanview JPEG2000 jp2 Stack Buffer Overflow (CVE-2012-0897)

A buffer overflow vulnerability has been reported in Irfanview JPEG2000 v4.3.2.0 jp2 QCD parsing...

CVE-2012-6593

Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.4 allows remote attackers to execute arbitrary commands via unspecified vectors, aka Ref ID 30088...

CVE-2012-6594

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299...

CVE-2012-6595

The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595...

CVE-2012-6590

The CVE-2012-6590 entry affects Palo Alto Networks PAN-OS 4.0.x prior to 4.0.8. The vulnerability is an information-disclosure issue where the web-based management UI may leak verbose error information to remote attackers through specially crafted input. Affected component: the PAN-OS web managem...

CVE-2012-6591

Summary: CVE-2012-6591 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.0.x before 4.0.5. The device-management CLI is vulnerable to command injection. Impact: remotely (via authenticated admin) execute arbitrary commands with potentially complete device compromise. Affected versions: PAN-OS...

CVE-2012-6600

Consolidated details: CVE-2012-6600 affects Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2. The device-management CLI allows remote authenticated users to execute arbitrary commands via unspecified vectors. Impact is arbitrary command execution potentially leading to device c...

CVE-2012-6601

PAN-OS < 3.1.12, < 4.0.10 (4.0.x) and

CVE-2012-6593

PAN-OS versions prior to 3.1.10 and 4.x prior to 4.0.4 are affected by CVE-2012-6593, a multiple command injection vulnerability that allows an unauthenticated remote attacker to inject commands and achieve arbitrary command execution as root on the device. The underlying issue is in the manageme...

CVE-2012-6605

CVE-2012-6605 affects Palo Alto Networks PAN-OS prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially compromising the device (root). Affected versions require upgrading to PAN-OS 3.1.11...

CVE-2012-6601

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4 allows remote attackers to execute arbitrary code via unspecified vectors, aka Ref ID 36983...

CVE-2012-6602

CVE-2012-6602 affects Palo Alto Networks PAN-OS before 3.1.10 and 4.x before 4.0.4. The device-management CLI allows remote authenticated users to inject arbitrary shell commands, enabling arbitrary command execution via the CLI. Root cause: command injection in the management interface. Impact a...

CVE-2012-6598

Affected product : Palo Alto Networks PAN-OS 4.0.x (prior to 4.0.8). Vulnerability : device-management CLI allows authenticated remote users to execute arbitrary shell commands via unspecified vectors. Root cause / impact : command injection via the management interface could lead to arbitrary co...