Oracle Linux 5 : glibc (ELSA-2012-1207)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1207 advisory. 2.5-81.el58.7 - Fix out of bounds array access in strto exposed by 847929 patch. 2.5-81.el58.6 - Fix integer overflow leading to buffer overflow in strto 847929...

Oracle Linux 5 : glibc (ELSA-2012-1097)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1097 advisory. 2.5-81.el58.4 - Fix iconv segfault if the invalid multibyte character 0xffff is input when converting from IBM930 837896 2.5-81.el58.3 - Fix unbound alloca in...

Oracle Linux 6 : glibc (ELSA-2012-0393)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0393 advisory. 2.12-1.47.el62.9 - Always use another area after a failed allocation in the main arena 795328 - Remove sse3 memcpy 695812 changes 799259 2.12-1.47.el62.8 - Avoi...

Oracle Linux 5 : glibc (ELSA-2013-0769)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0769 advisory. - Fix multibyte character processing crash in regexp CVE-2013-0242, 951130 - Fix getaddrinfo stack overflow resulting in application crash CVE-2013-191...

Oracle Linux 5 : glibc (ELSA-2010-0793)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0793 advisory. 2.5-49.el55.7 - Require suid bit on audit objects in privileged programs 645677, CVE-2010-3856 Tenable has extracted the preceding description block directly fr...

Oracle Linux 5 : glibc (ELSA-2011-0412)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0412 advisory. - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 - Don't leave empty element in rpat...

Oracle Linux 5 : glibc (ELSA-2012-0126)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0126 advisory. 2.5-65.el57.3 - Use correct type when casting dtag 767687 - Report write error in addmnt even for cached streams 767687 - ldd: Never run file directly...

Oracle Linux 6 : glibc (ELSA-2012-0058)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0058 advisory. 2.12-1.47.el62.5 - Avoid high cpu usage when accept fails with EMFILE 767692 2.12-1.47.el62.4 - Make implementation of ARENASTEST and ARENASMAX match...

Oracle Linux 5 : glibc (ELSA-2010-0787)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0787 advisory. 2.5-49.el55.6 - Never expand in privileged programs 643818, CVE-2010-3847 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 6 : glibc (ELSA-2012-1208)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1208 advisory. 2.12-1.80.el63.5 - Fix integer overflow leading to buffer overflow in strto and related out of bounds array index 847931 Tenable has extracted the preceding...

Oracle Linux 5 : glibc (ELSA-2012-0397)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0397 advisory. 2.5-81.el58.1 - Add dist tag when building file lists 784646. - Avoid nargs integer overflow which could be used to bypass FORTIFYSOURCE 794813 Tenable has...

Oracle Linux 4 : glibc (ELSA-2012-0125)

From Red Hat Security Advisory 2012:0125 : Updated glibc packages that fix multiple security issues and one bug are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS...

Oracle Linux 6 : glibc (ELSA-2010-0872)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0872 advisory. - Require suid bit on audit objects in privileged programs 645679, CVE-2010-3856 Tenable has extracted the preceding description block directly from th...

Oracle Linux 6 : glibc (ELSA-2012-1098)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1098 advisory. 2.12-1.80.el63.3 - Fix incorrect/corrupt patchfile for 833716. Did not affect generated code, but tests were missing 833716. 2.12-1.80.el63.2 - Fix...

Oracle Linux 6 : glibc (ELSA-2011-0413)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0413 advisory. - Avoid too much stack use in fnmatch 681054, CVE-2011-1071 - Properly quote output of locale 625893, CVE-2011-1095 Tenable has extracted the preceding...

[Arachni v0.4.3] Ruby framework aimed towards helping penetration testers

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications. Arachni is smart, it trains itself by learning from the HTTP responses it receives during the audit process. Unlike other...

xdm -- remote denial of service

nvd.nist.gov reports X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a denial of service NULL pointer dereference and crash by attempting to log int...

SuSE 10 Security Update : glibc (ZYPP Patch Number 8579)

This collective update for the GNU C library glibc provides the following fixes : - Fix stack overflow in getaddrinfo with many results. bnc813121, CVE-2013-1914 - Fix locking in IOcleanup. bnc796982 - Fix buffer overflow in glob. bnc691365 - Fix memory leak in execve bnc805899 %NASLMINLEVEL 7030...

Fedora Update for glibc FEDORA-2013-4174

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for glibc FEDORA-2013-4174

Check for the Version of glibc OpenVAS Vulnerability Test Fedora Update for glibc FEDORA-2013-4174 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...