Ubuntu: Security Advisory (USN-1127-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-source-2.6.15 USN-1111-1

Ubuntu Update for Linux kernel vulnerabilities USN-1111-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11111.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux-source-2.6.15 USN-1111-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

[USN-1111-1] Linux kernel vulnerabilities

========================================================================== Ubuntu Security Notice USN-1111-1 May 05, 2011 linux-source-2.6.15 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its...

USN-1127-1: usb-creator vulnerability

Evan Broder discovered that usb-creator did not properly enforce restrictions when performing privileged disk operations. A local attacker could use this flaw to perform certain disk operations, such as unmount arbitrary mountpoints...

[Full-disclosure] [USN-1127-1] usb-creator vulnerability

========================================================================== Ubuntu Security Notice USN-1127-1 May 02, 2011 usb-creator vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

usb-creator privilege escalation

Some privileged disk operations are possible...

CVE-2011-1507

Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial...

DEBIAN-CVE-2011-1507

Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial...

Code injection

Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial...

CVE-2011-1507

Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial...

CVE-2011-1507

Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial...

CVE-2011-1507

Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial...

FreeBSD : Asterisk -- multiple vulnerabilities (3c7d565a-6c64-11e0-813a-6c626dd55a41)

The Asterisk Development Team reports : It is possible for a user of the Asterisk Manager Interface to bypass a security check and execute shell commands when they should not have that ability. Sending the 'Async' header with the 'Application' header during an Originate action, allows authenticat...

Thousands of brain cloud disk tasteless vulnerability of ordinary uploads change VIP download-vulnerability warning-the black bar safety net

| Thousands of brain home to open the Upload File address, out of the connection is: If the“justupload. jsp? id=”back content into any user name, for example administrator account: webtomos it. That upload address with the following: Upload files, on to VIP download. File test address: ---...

kernel security update

CentOS Errata and Security Advisory CESA-2011:0429 Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scorin...

Design/Logic Flaw

The ocfs2preparepageforwrite function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 OCFS2 subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized dis...

CVE-2011-0463

The ocfs2preparepageforwrite function in fs/ocfs2/aops.c in the Oracle Cluster File System 2 OCFS2 subsystem in the Linux kernel before 2.6.39-rc1 does not properly handle holes that cross page boundaries, which allows local users to obtain potentially sensitive information from uninitialized dis...

Distribution Release : SystemRescueCd 2.1.0 Download

François Dupoux has released an updated version of SystemRescueCd, a Gentoo-based live CD containing a collection of utilities for disk management and data rescue tasks. What's new in version 2.1.0? "Updated standard kernels to 2.6.35.12 long-term kernel: rescuecd + rescue64; alternative kernels...

AIX 610006 : U839992

The remote host is missing AIX PTF U839992 which is related to the security of the package devices.scsi.disk.rte.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

Picasa may insecurely load executable files

Overview Picasa may use unsafe methods for determining how to load executables .exe Picasa is a software for viewing and managing photos. Picasa loads certain executables when using the "Locate on Disk" function. Picasa contains an issue with the file search path, which may insecurely load...