XEN: security and bugfix update (important)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

CVE-2012-5520

The sendtosourcefire function in managesql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the 1 IP address or 2 port number field in an OMP request...

CVE-2012-2438

AWCM 2.2 is vulnerable to an access-control flaw that lets unauthenticated attackers insert millions of comment records through the HTTP parameter com ent to show_video.php or topic.php, leading to disk consumption DoS. Root cause is lack of access protection for comment insertion. PoC examples e...

CVE-2012-0698

CVE-2012-0698 affects the TrouSerS project’s tcsd daemon. A crafted type_offset value in a TCP packet to port 30003 can cause a denial of service (daemon crash). The issue lies in how tcsd processes incoming TCP packets. Upstream fix is to upgrade TrouSerS to version 0.3.13 (from the affected 0.3...

CVE-2012-2437

AWCM 2.2 contains an unauthenticated cookie forgery vulnerability in cookie_gen.php. An attacker can forge arbitrary cookies by supplying name and content parameters without authentication, as described in multiple sources (PoC shows requests like /awcm/cookie_gen.php?name=...&content=...). Root ...

CVE-2012-5520

The CVE-2012-5520 issue affects OpenVAS Manager 3.x before 3.0.4, where the send_to_sourcefire function in manage_sql.c constructs a shell command using unvalidated user input (IP address and port) from OMP requests. This command injection could allow an attacker (authenticated OpenVAS Manager us...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. VID f115f693-36b2-11e2-a633-902b343deec9 OpenVAS Vulnerability Test $ Description: Auto generated from VID f115f693-36b2-11e2-a633-902b343deec9 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Webmin show.cgi Open Function Call Command Execution

Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...

[USN-1635-1] libunity-webapps vulnerability

========================================================================== Ubuntu Security Notice USN-1635-1 November 21, 2012 libunity-webapps vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

mcrypt 2.5.8 - Local Stack Overflow

mcrypt 2.5.8 - Local Stack Overflow !/usr/bin/perl Title : mcrypt ', $filename; print F $file; close F; sub buildfile magic $file .= "\x00m\x03"; flags $file .= pack'C', 1 6; algorithm $file .= "H@Ck3d\x00"; keysize $file .= pack'S', 0xdead; mode $file .= "h@cK3d\x00"; keymode $file .=...

Mozilla Thunderbird Multiple Vulnerabilities-02 November12 (Windows)

This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillathunderbirdmultvuln02nov12win.nasl 6022 2017-04-25 12:51:04Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities-02 November12 Windows Authors: Arun Kallavi...

FreeBSD Ports: tomcat

The remote host is missing an update to the system as announced in the referenced advisory. VID 4ca26574-2a2c-11e2-99c7-00a0d181e71d OpenVAS Vulnerability Test $ Description: Auto generated from VID 4ca26574-2a2c-11e2-99c7-00a0d181e71d Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: chromium

The remote host is missing an update to the system as announced in the referenced advisory. VID 209c068d-28be-11e2-9160-00262d5ed8ee OpenVAS Vulnerability Test $ Description: Auto generated from VID 209c068d-28be-11e2-9160-00262d5ed8ee Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: ruby

The remote host is missing an update to the system as announced in the referenced advisory. VID 5e647ca3-2aea-11e2-b745-001fd0af1a4c OpenVAS Vulnerability Test $ Description: Auto generated from VID 5e647ca3-2aea-11e2-b745-001fd0af1a4c Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Fedora 16 : insight-7.4.50-4.20120403cvs.fc16 (2012-18300)

Thu Nov 15 2012 Patrick Monnerat 7.4.50-4.20120403cvs - Path 'objalloc' to fix libiberty security bug CVE-2012-3509. https://bugzilla.redhat.com/showbug.cgi?id=877014 - Enable Python to support STL extensions. https://bugzilla.redhat.com/showbug.cgi?id=865554 Note that Tenable Network Security...

Fedora 18 : mod_security-2.7.1-3.fc18 / mod_security_crs-2.2.6-3.fc18 (2012-18278)

Update to 2.7.1 - Update Core rules set to 2.2.6 - Fix build against libxml2 = 2.9 upstreamed - Add some missing directives RHBZ 569360 - Fix multipart/invalid part ruleset bypass issue CVE-2012-4528 RHBZ 867424, 867773, 867774 Note that Tenable Network Security has extracted the preceding...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mozilla Thunderbird Multiple Vulnerabilities-01 (Nov 2012) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: tomcat

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...