518 matches found
USN-1609-1 : linux-ti-omap4 vulnerability
A flaw was found in how the Linux kernel's KVM Kernel-based Virtual Machine subsystem handled MSI Message Signaled Interrupts. A local unprivileged user could exploit this flaw to cause a denial of service or potentially elevate privileges. This script was automatically generated from Ubuntu...
Debian DSA-2479-1 : libxml2 - off-by-one
Jueri Aedla discovered an off-by-one in libxml2, which could result in the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2479. The text itself is copyright C...
Debian DSA-2472-1 : gridengine - privilege escalation
Dave Love discovered that users who are allowed to submit jobs to a Grid Engine installation can escalate their privileges to root because the environment is not properly sanitized before creating processes. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
Debian DSA-2466-1 : rails - XSS
Sergey Nartimov discovered that in Rails, a Ruby based framework for web development, when developers generate html options tags manually, user input concatenated with manually built tags may not be escaped and an attacker can inject arbitrary HTML into the document. %NASLMINLEVEL 70300 C Tenable...
Ubuntu 10.10 : linux-mvl-dove vulnerabilities (USN-1328-1)
Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. CVE-2011-2203 A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. CVE-2011-4110. C Tenable...
Debian DSA-2329-1 : torque - buffer overflow
Bartlomiej Balcerek discovered several buffer overflows in TORQUE server, a PBS-derived batch processing server. This allows an attacker to crash the service or execute arbitrary code with privileges of the server via crafted job or host names. The oldstable distribution lenny does not contain...
Debian DSA-2321-1 : moin - XSS
A cross-site scripting vulnerability was discovered in the reStructuredText parser of Moin, a Python clone of WikiWiki. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2321. The text itsel...
Debian DSA-2199-1 : iceape - ssl certificate blacklist update
This update for the Iceape internet suite, an unbranded version of SeaMonkey, updates the certificate blacklist for several fraudulent HTTPS certificates. More details can be found in a blog posting by Jacob Appelbaum of the Tor project. The oldstable distribution lenny is not affected. The iceap...
Debian DSA-2182-1 : logwatch - shell command injection
Dominik George discovered that Logwatch does not guard against shell meta-characters in crafted log file names such as those produced by Samba. As a result, an attacker might be able to execute shell commands on the system running Logwatch. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Fedora Update for dpkg FEDORA-2011-0362
Check for the Version of dpkg OpenVAS Vulnerability Test Fedora Update for dpkg FEDORA-2011-0362 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora 13 : dpkg-1.15.5.6-6.fc13 (2011-0345)
Fix CVE-2010-1679 Fix CVE-2011-0402 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora Update for dpkg FEDORA-2011-0362
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for dpkg FEDORA-2011-0345
Check for the Version of dpkg OpenVAS Vulnerability Test Fedora Update for dpkg FEDORA-2011-0345 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora 14 : dpkg-1.15.5.6-6.fc14 (2011-0362)
Fix CVE-2010-1679 Fix CVE-2011-0402 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...
Fedora Update for dpkg FEDORA-2011-0345
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[SECURITY] Fedora 13 Update: dpkg-1.15.5.6-6.fc13
This package contains the tools including dpkg-source required to unpack, build and upload Debian source packages. This package also contains the programs dpkg which used to handle the installation and removal of packages on a Debian system. This package also contains dselect, an interface for...
[SECURITY] Fedora 14 Update: dpkg-1.15.5.6-6.fc14
This package contains the tools including dpkg-source required to unpack, build and upload Debian source packages. This package also contains the programs dpkg which used to handle the installation and removal of packages on a Debian system. This package also contains dselect, an interface for...
CVE-2011-0402
dpkg-source in dpkg before 1.14.31 and 1.15.x allows user-assisted remote attackers to modify arbitrary files via a symlink attack on unspecified files in the .pc directory...
