Oracle Linux 6 : openssl (ELSA-2014-0376)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0376 advisory. 1.0.1e-16.7 - fix CVE-2014-0160 - information disclosure in TLS heartbeat extension Tenable has extracted the preceding description block directly from the Orac...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 8922)

This update of Adobe Flash Player fixes the following issues : - A stack overflow vulnerability that could have resulted in arbitrary code execution. CVE-2014-0498 - A memory leak vulnerability that could have been used to defeat memory address layout randomization. CVE-2014-0499 - A double free...

AIX 7.1 TL 0 : infiniband (IV43562)

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory infinibandadvisory.asc...

Oracle Linux 5 : mysql (ELSA-2010-0109)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0109 advisory. - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030 Resolves: 556505 Tenable has extracted the preceding description block directly from the...

Oracle Linux 6 : nspluginwrapper (ELSA-2012-1459)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-1459 advisory. 1.4.4-1 - Rebase the package to latest upstream - Added Adobe reader fix 645599 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 : ghostscript (ELSA-2009-0421)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0421 advisory. - Added extra checking for CVE-2009-0792 bug 491853. - Applied patch to fix CVE-2009-0792 bug 491853. Tenable has extracted the preceding description...

Oracle Linux 5 : cups (ELSA-2009-1595)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1595 advisory. - Applied patch to fix CVE-2009-3553 bug 530111, STR 3200. Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 5 : apr-util (ELSA-2009-1107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1107 advisory. 1.2.7-7.el53.1 - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 504560 Tenable has extracted the preceding description block...

Oracle Linux 5 : bind (ELSA-2009-1179)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1179 advisory. - fix namedsdb as well CVE-2009-0696, 514292 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerability (USN-1738-1)

Suleiman Souhlal, Salman Qazi, Aaron Durbin and Michael Davidson discovered a race condition in the Linux kernel's ptrace syscall. An unprivileged local attacker could exploit this flaw to run programs as an administrator. Note that Tenable Network Security has extracted the preceding description...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 8360)

This update of flash-player fixes multiple unspecified buffer overflows, memory corruptions and other security-related issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc';...

Fedora 17 : calligra-2.5.0-2.fc17 / calligra-l10n-2.5.0-2.fc17 (2012-11566)

New stable release, which includes security fix for msword-odf import filter. See also: http://www.calligra.org/news/calligra-2-5-released/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

RHEL 5 : php53 (RHSA-2012:0547)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0547 advisory. - php: command line arguments injection when run in CGI mode VU520827 CVE-2012-1823 Note that Nessus has not tested for this issue but has instead...

RHEL 5 / 6 : openssl (RHSA-2012:0518)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0518 advisory. OpenSSL is a toolkit that implements the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols, as well as a full-strength...

RHEL 6 : kernel (RHSA-2012:0052)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0052 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: It was found th...

Vulnerability Discovered in SpyEye Botnet, Exploit Available for Download

Vulnerability Discovered in SpyEye Botnet , Exploit Available for Download Blind SQL injection Vulnerability Discovered in SpyEye Botnet by S4uR4 r00tw0rm.com Exploit : Vulnn type : Blind SQL injection vuln script : frmcardsedit.php Affected version : ALL May use any botnet from...

Fedora 14 : dhcp-4.2.0-23.P2.fc14 (2011-10705)

This update fixes a pair of defects that could cause the server to halt upon processing certain packets. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities

Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix:...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 4476)

This update to wireshark version 1.4.5 fixes the following security issues : - Resource Management Errors. CWE-399, CVE-2011-1590 - Buffer Errors. CWE-119, CVE-2011-1591 - Numeric Errors CWE-189, CVE-2011-1592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE Security Update : flash-player (openSUSE-SU-2011:0239-1)

The Adobe Standalone Flash Player was updated to the 10.2.153.1, fixing several bugs and one security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update flash-player-4239. The text...