CVE-2012-6598

Affected product : Palo Alto Networks PAN-OS 4.0.x (prior to 4.0.8). Vulnerability : device-management CLI allows authenticated remote users to execute arbitrary shell commands via unspecified vectors. Root cause / impact : command injection via the management interface could lead to arbitrary co...

CVE-2012-6605

The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11 and 4.0.x before 4.0.9 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka Ref ID 34896...

CVE-2012-6603

CVE-2012-6603 affects Palo Alto Networks PAN-OS: the web management UI allows an unauthenticated attacker to bypass authentication and obtain administrator privileges. Affected releases are PAN-OS before 3.1.12, 4.0.x before 4.0.10, and 4.1.x before 4.1.4. The vulnerability is described as an aut...

CVE-2012-6597

The CVE affects Palo Alto Networks PAN-OS pre-3.1.11 and pre-4.0.9 (specifically PAN-OS 3.1.x before 3.1.11 and 4.0.x before 4.0.9). The underlying issue is a denial-of-service via a crafted command sent to the CLI, exploitable by remote authenticated users to crash the management server. Remedia...

CVE-2012-6595

CVE-2012-6595 affects Palo Alto Networks PAN-OS prior to 4.0.9 (4.0.x) and prior to 4.1.2 (4.1.x). The issue arises in the device-management command-line interface, allowing an authenticated user to execute arbitrary shell commands via the CLI (unspecified vectors). Impact described in connected ...

CVE-2012-6604

CVE-2012-6604 : Affected are Palo Alto Networks PAN-OS versions prior to 3.1.11 and 4.0.x prior to 4.0.9. The device-management CLI has a vulnerability that allows remote authenticated users to execute arbitrary code via unspecified vectors, potentially leading to full device compromise (root acc...

CVE-2012-6594

The CVE-2012-6594 issue affects Palo Alto Networks PAN-OS: PAN-OS versions prior to 3.1.11, 4.0.x prior to 4.0.8, and 4.1.x prior to 4.1.1 are vulnerable. The device-management CLI allows an authenticated, remote administrator to inject arbitrary shell commands via unspecified vectors. This can l...

CVE-2012-6596

PAN-OS < 4.0.9 and

CVE-2012-6592

CVE-2012-6592 affects Palo Alto Networks PAN-OS 3.1.x and 4.x prior to 4.0.5. The vulnerability allows an unauthenticated attacker to inject commands as root on the device via the management interface, enabling arbitrary command execution and potential total compromise. Affected versions are PAN-...

CVE-2012-6599

The CVE-2012-6599 entry concerns Palo Alto Networks PAN-OS command injection in the device-management CLI. Affected products are PAN-OS 4.0.x before 4.0.8 and 4.1.x before 4.1.1, where an authenticated user can execute arbitrary shell commands via unspecified vectors. The vulnerability arises in ...

CVE-2012-5744

The CVE-2012-5744 issue concerns multiple XSS vulnerabilities in the Cisco Identity Services Engine (ISE) guest portal. Connected sources specify that the flaw stems from improper input validation in the guest portal, enabling an unauthenticated or remote attacker to lure a user to a link and cau...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2543)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2543 advisory. - block: do not pass disk names as format strings Kees Cook Orabug: 17230083 CVE-2013-2851 - libceph: Fix NULL pointer dereference in auth client...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2013-2542)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2542 advisory. - block: do not pass disk names as format strings Jerry Snitselaar Orabug: 17230124 CVE-2013-2851 - afkey: initialize satype in keynotifypolicyflus...

Security fix for the ALT Linux 7 package kernel-image-el-def version 2.6.32-alt11

2.6.32-alt11 built Aug. 30, 2013 Led in task 103311 Aug. 28, 2013 Led - 2.6.32-358.18.1.el6: + CVE-2012-6544 + CVE-2013-2146 + CVE-2013-2206 + CVE-2013-2224 + CVE-2013-2237...

RSA SecurID Software Token Converter Buffer Overflow

RSA SecurID Software Token Converter prior to version 2.6.1 is affected by an overflow condition. A boundary error occurs when handling XML-formatted '.sdtid' file strings. By convincing a user to run the converter with a crafted file, an attacker can execute arbitrary code. TRUSTED...

CentOS 6 : kernel (CESA-2013:1173)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

kernel, perf, python security update

CentOS Errata and Security Advisory CESA-2013:1173 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

unbreakable enterprise kernel security update

kernel-uek 2.6.32-400.29.3uek - block: do not pass disk names as format strings Jerry Snitselaar Orabug: 17230124 CVE-2013-2851 - afkey: initialize satype in keynotifypolicyflush Nicolas Dichtel Orabug: 17370765 CVE-2013-2237 - Bluetooth: L2CAP - Fix info leak via getsockname Mathias Krause Orabu...

unbreakable enterprise kernel security update

2.6.39-400.109.6 - block: do not pass disk names as format strings Kees Cook Orabug: 17230083 CVE-2013-2851 - libceph: Fix NULL pointer dereference in auth client code Tyler Hicks Orabug: 17230108 CVE-2013-1059 - ipv6: ip6skdstcheck must not assume ipv6 dst Eric Dumazet Orabug: 17371078...

Fedora 19 : glibc-2.17-14.fc19 (2013-15316)

systemd is now required during build so that installing or updating nscd does not result in any warnings. rtkaio bits are now tested correctly. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...