[AIEngine] Artificial Inteligent Engine

AIEngine is a packet inspection engine with capabilities of learning without any human intervention. AIEngine helps network/security profesionals to identify traffic and develop signatures for use them on NIDS, Firewalls, Traffic classifiers and so on. Using AIEngine To use AIEngine just execute...

Fedora 19 : qt-4.8.5-15.fc19 (2013-22932)

Qt Project Security Advisory: XML Entity Expansion Denial of Service CVE-2013-4549 See also http://lists.qt-project.org/pipermail/announce/2013-December/000036.ht ml In addition, this update : - adds support for the aarch64 architecture, - fixes QTBUG-35459, a too low character limit for XML...

ColdFusion Extended Support Version Detection (credentialed check)

According to its version, there is at least one installation of ColdFusion that is potentially under Extended Support. Note that the Extended Support program requires a vendor contract. Extended Support provides upgrades and security fixes for two years after regular support ends. C Tenable Netwo...

nss: CERT_VerifyCert returns SECSuccess (saying certificate is good) even for bad certificates (MFSA 2013-103)

The CERTVerifyCert function in lib/certhigh/certvfy.c in Mozilla Network Security Services NSS 3.15 before 3.15.3 provides an unexpected return value for an incompatible key-usage certificate when the CERTVerifyLog argument is valid, which might allow remote attackers to bypass intended access...

nss: Null_Cipher() does not respect maxOutputLen (MFSA 2013-103)

Mozilla Network Security Services NSS 3.14 before 3.14.5 and 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid handshake packets...

Updated nss packages fix security vulnerability

Updated nss packages fix security vulnerability: The sslDo1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services NSS before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509...

[SECURITY] Fedora 20 Update: nss-3.15.4-1.fc20

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 20 Update: nss-util-3.15.4-1.fc20

Utilities for Network Security Services and the Softoken module...

Fedora 20 : kernel-3.12.8-300.fc20 (2014-1062)

The 3.12.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : kernel-3.12.8-200.fc19 (2014-1072)

The 3.12.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Design/Logic Flaw

The sslDo1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services NSS before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 / 13.10 : graphviz vulnerabilities (USN-2083-1)

It was discovered that Graphviz incorrectly handled memory in the yyerror function. If a user were tricked into opening a specially crafted dot file, an attacker could cause Graphviz to crash, or possibly execute arbitrary code. CVE-2014-0978, CVE-2014-1235 It was discovered that Graphviz...

Fedora 20 : java-1.7.0-openjdk-1.7.0.60-2.4.4.0.fc20 (2014-0885)

Security update to icedtea 2.4.4 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

Fedora 19 : java-1.7.0-openjdk-1.7.0.60-2.4.4.0.fc19 (2014-0945)

Security update to icedtea 2.4.4 http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.h tml Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as mu...

Fedora 19 : kernel-3.12.7-200.fc19 (2014-0684)

The 3.12.7 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

MySQL 5.5 < 5.5.34 Multiple Vulnerabilities

The version of MySQL installed on the remote host is 5.5.x prior to 5.5.34. It is, therefore, potentially affected by vulnerabilities in the following components : - InnoDB - Locking - Partition - Optimizer C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71973;...

Network Security Assessment: Subterfuge

Subterfuge is no longer a Beta! Now it is a full fledged network security assessment tool in its own right Walk into Starbucks, plop down a laptop, click start, watch the credentials roll in. Enter Subterfuge, a Framework to take the arcane art of Man-in-the-Middle Attack and make it as simple as...

Fedora 18 : asterisk-11.7.0-1.fc18 (2013-24142)

Sat Dec 28 2013 Jeffrey Ollie - 11.7.0-1 : - The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk Note that Tenable Network Security has extracted the preceding...

Fedora 20 : asterisk-11.7.0-1.fc20 (2013-24108)

Sat Dec 28 2013 Jeffrey Ollie - 11.7.0-1 : - The Asterisk Development Team has announced the release of Asterisk 11.7.0. - This release is available for immediate download at - http://downloads.asterisk.org/pub/telephony/asterisk Note that Tenable Network Security has extracted the preceding...

Solaris 10 (sparc) : 143749-02 (deprecated)

Messaging Server 7u2-12.01: core patch. Date this patch was last updated by Sun : Sep/21/10 This plugin has been deprecated and either replaced with individual 143749 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled...