[SECURITY] [DSA 2626-1] lighttpd security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2626-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 17, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2626-1 (lighttpd - several issues)

Several vulnerabilities were discovered in the TLS/SSL protocol. This update addresses these protocol vulnerabilities in lighttpd. CVE-2009-3555 Marsh Ray, Steve Dispensa, and Martin Rex discovered that the TLS and SSLv3 protocols do not properly associate renegotiation handshakes with an existin...

CVE-2012-5199

CVE-2012-5199 affects HP ArcSight Connector Appliance ≤6.3 and ArcSight Logger ≤5.2. Root cause is an unspecified vulnerability that could allow remote authenticated users to execute arbitrary code via unknown vectors. HP’s security bulletin SSRT101056 indicates remediation by updating to ArcSigh...

CVE-2012-3286

CVE-2012-3286: Unspecified vulnerability in HP ArcSight Connector Appliance ≤6.3 and ArcSight Logger ≤5.2 that could allow remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. HP’s security bulletin SSRT101056/HPSBMU02836 indic...

CVE-2012-5198

HP ArcSight Connector Appliance older than 6.3 and ArcSight Logger older than 5.2 are affected by CVE-2012-5198, a remote information-disclosure vulnerability with unknown vectors. HP's security bulletin HPSBMU02836/SSRT notes remediation: upgrade to ArcSight Connector Appliance 6.4 and ArcSight ...

[SECURITY] [DSA 2624-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2624-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 16, 2013 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2626-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMSA-2013-0001 : VMware vSphere security updates for the authentication service and third-party libraries

a. VMware vSphere client-side authentication memory corruption vulnerability VMware vCenter Server, vSphere Client, and ESX contain a vulnerability in the handling of the management authentication protocol. To exploit this vulnerability, an attacker must convince either vCenter Server, vSphere...

CVE-2012-4701

Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging 1 valid credentials or 2 the guest feature...

CVE-2012-4712

CVE-2012-4712 affects Moxa EDR-G903 series routers. Root cause: a hard-coded account present in firmware prior to version 2.11, enabling remote attackers to obtain unspecified device access via unknown vectors. Impact: potential unauthorized access to the router, with confidentiality/integrity co...

CVE-2012-4694

CVE-2012-4694 affects Moxa EDR-G903 series routers with firmware prior to 2.11. The root cause is insufficient entropy when generating SSH and SSL keys, enabling potential MITM attacks by deriving or predicting host keys. Impact includes potential compromise of confidentiality and integrity of co...

CVE-2012-4701

CVE-2012-4701 describes a directory traversal in Tridium Niagara AX (versions 3.5–3.7) that lets a remote attacker read sensitive files and potentially execute arbitrary code. The vulnerability can be triggered when valid credentials are present or when the guest feature is enabled, enabling unau...

Ubuntu Update for linux USN-1720-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN17201.nasl 8494 2018-01-23 06:57:55Z teissa $ Ubuntu Update for linux USN-1720-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

Fedora Update for libupnp FEDORA-2013-1734

Check for the Version of libupnp OpenVAS Vulnerability Test Fedora Update for libupnp FEDORA-2013-1734 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for qt4-x11 USN-1723-1

Check for the Version of qt4-x11 OpenVAS Vulnerability Test $Id: gbubuntuUSN17231.nasl 7958 2017-12-01 06:47:47Z santu $ Ubuntu Update for qt4-x11 USN-1723-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software...

Ubuntu: Security Advisory (USN-1726-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libupnp FEDORA-2013-1765

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...

Debian DSA-2623-1 : openconnect - buffer overflow

Kevin Cernekee discovered that a malicious VPN gateway can send crafted responses which trigger stack-based buffer overflows. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2623. The text...

USN-1726-1 : linux-ti-omap4 vulnerabilities

It was discovered that hypervkvpd, which is distributed in the Linux kernel, was not correctly validating the origin on Netlink messages. An untrusted local user can cause a denial of service of Linux guests in Hyper-V virtualization environments. CVE-2012-2669 Dmitry Monakhov reported a race...

Fedora Update for libupnp FEDORA-2013-1713

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected",...