SUSE SLES11 Security Update : kernel (SUSE-SU-2017:2723-1)

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix the following issues : - Stack corruption could have lead to local privilege escalation bsc1059525, CVE-2017-1000253. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisor...

RHEL 6 : kernel (RHSA-2017:2795)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2795 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A flaw was found in the way the Linux kernel...

RHEL 6 : kernel (RHSA-2017:2796)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2796 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A flaw was found in the way the Linux kernel...

Fedora 26 : kernel (2017-deb70b495e)

The 4.11.11 update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introduci...

Oracle Linux 6 : samba4 (ELSA-2017-1271)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1271 advisory. 4.2.10-10 - resolves: 1450779 - Security fix for CVE-2017-7494 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Oracle Linux 6 / 7 : ghostscript (ELSA-2017-1230)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-1230 advisory. - Security fix for CVE-2017-8291 updated to address SIGSEGV Tenable has extracted the preceding description block directly from the Oracle Linux security...

Fedora 25 : chromium (2017-ff6940bf63)

Security fix for CVE-2017-5055, CVE-2017-5054, CVE-2017-5052, CVE-2017-5056, CVE-2017-5053 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possibl...

Fedora 24 : 1:tomcat (2016-a98c560116)

This updates includes a rebase from tomcat 8.0.38 up to 8.0.39 which resolves multiple CVEs : - \1397493 - CVE-2016-6816 CVE-2016-6817 CVE-2016-8735 tomcat: various flaws Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system websit...

Default Password 'vizxv' for 'root' Account

The account 'root' on the remote host has the default password 'vizxv'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "vizxv"; include'deprecatednasllevel.inc';...

Fedora 23 : python (2016-a0853405eb)

Security fix for CVE-2016-0772 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

HP Operations Orchestration 10.x < 10.51 Java Object Deserialization RCE

The version of HP Operations Orchestration installed on the remote host is 10.x prior to 10.51. It is, therefore, affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated,...

Oracle Linux 5 : bind97 (ELSA-2015-1515)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-1515 advisory. - Fix CVE-2015-5477 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...

Dell iDRAC Products IPMI Arbitrary Command Injection Vulnerability

The remote host is running a version of iDRAC that ships with a version of IPMI that does not sufficiently randomize session ID values. An unauthenticated, remote attacker can exploit this to inject arbitrary commands into a privileged session. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

MS14-084: Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (3016711)

The installed version of the VBScript Scripting Engine is affected by a remote code execution vulnerability due to improper handling of objects in memory. By tricking a user into viewing or opening malicious content, an attacker can exploit this to execute arbitrary code on the affected system,...

MS14-065: Cumulative Security Update for Internet Explorer (3003057)

The version of Internet Explorer installed on the remote host is missing Cumulative Security Update 3003057. It is, therefore, affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to visit a...

openSUSE Security Update : flash-player (openSUSE-SU-2012:0996-1)

Adobe Flash Player was updated to 11.2.202.238 fixing various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-518. The text description of this plugin i...

MS KB2957151: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB2957151. It is, therefore, affected by multiple vulnerabilities : - An unspecified use-after-free vulnerability exists that could allow for the execution of arbitrary code. CVE-2014-0510 - An unspecified vulnerability exists that could be used to bypass the same origi...

MS14-026: Vulnerability in .NET Framework Could Allow Elevation of Privilege (2958732)

The remote Windows host has a version of the Microsoft .NET Framework that is affected by a privilege escalation vulnerability due to the way that .NET Framework handles TypeFilterLevel checks for some malformed objects. Note that this vulnerability only affects applications that use .NET Remotin...

McAfee ePolicy Orchestrator OpenSSL Information Disclosure (SB10071) (Heartbleed)

The remote host is running a version of McAfee ePolicy Orchestrator that is affected by an information disclosure due to a flaw in the OpenSSL library, commonly known as the Heartbleed bug. An attacker could potentially exploit this vulnerability repeatedly to read up to 64KB of memory from the...

HP Systems Insight Manager < 7.2 Multiple Vulnerabilities

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the included Flash components. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid72963;...