Ubuntu 12.04 LTS : libkdcraw vulnerabilities (USN-1978-1)

It was discovered that libKDcraw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against libKDcraw could be made to crash, resulting in a denial of service. CVE-2013-1438, CVE-2013-1439. Note that...

Iranian Hackers infiltrated US Navy computers

The Wall Street Journal reported that Iranian hackers have successfully penetrated unclassified US Navy computers, the allegations were made by US officials that consider the attacks a serious intrusion within the Government network. "The U.S. Officials said the attacks were carried out by hacker...

SecurityCenter devform.php message Parameter XSS

The version of Tenable Network Security SecurityCenter installed on the remote host contains the 'devform.php' script. This PHP script is affected by a cross-site scripting vulnerability because the application does not properly validate user-supplied input to the 'message' parameter. An attacker...

Fedora 18 : filezilla-3.7.3-1.fc18 (2013-14794)

Merge further fixes from PuTTY to address CVE-2013-4206, CVE-2013-4207, CVE-2013-4208 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : zabbix-2.0.6-3.fc19 (2013-14029)

This update solves a security issue involving the use of libcurl in the code used to access the eztexting service. It potentially allows for man-in-the-middle attacks. The issue was described as CVE-2012-6086. Please refer to https://support.zabbix.com/browse/ZBX-5924 for details! Note that Tenab...

Iranian Hackers infiltrated US Navy computers

The Wall Street Journal reported that Iranian hackers have successfully penetrated unclassified US Navy computers, the allegations were made by US officials that consider the attacks a serious intrusion within the Government network. "The U.S. Officials said the attacks were carried out by hacker...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1970-1)

Vince Weaver discovered a flaw in the perf subsystem of the Linux kernel on ARM platforms. A local user could exploit this flaw to gain privileges or cause a denial of service system crash. CVE-2013-4254 A failure to validate block numbers was discovered in the Linux kernel's implementation of th...

Ubuntu 12.04 LTS : linux-lts-raring vulnerabilities (USN-1971-1)

Vince Weaver discovered a flaw in the perf subsystem of the Linux kernel on ARM platforms. A local user could exploit this flaw to gain privileges or cause a denial of service system crash. CVE-2013-4254 A memory leak was discovered in the user namespace facility of the Linux kernel. A local user...

Cisco IOS Update Patches Eight Vulnerabilities

Telecommunications company Cisco this week is warning customers and those running their software of eight separate vulnerabilities it has patched in its internetwork operating system IOS infrastructure product. Cisco’s Product Security Incident Response Team PSIRT released the advisories yesterda...

Some Versions of Ruby on Rails Could Expose Cookies

Versions 2.0 to 4.0 of the popular open source Web framework Ruby on Rails are vulnerable to a Web security issue involving cookies that could make it much easier for someone to log in to an app as another user. According to security researcher G.S. McNamara, Ruby on Rails’ defacto session storin...

HP System Management Homepage ginkgosnmp.inc Command Injection

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is earlier than 7.2.2 and is, therefore, reportedly affected by a command injection vulnerability. An input validation error exists in the file 'ginkgosnmp.inc' related to the la...

Juniper NetScreen VPN Client Detection

The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : pyopenssl vulnerability (USN-1965-1)

It was discovered that pyOpenSSL did not properly handle certificates with NULL characters in the Subject Alternative Name field. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Securit...

Fedora 19 : proftpd-1.3.4d-4.fc19 (2013-16798)

This update addresses an issue with modsftp and modsftppam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

IBM WebSphere Service Registry and Repository Installed

IBM WebSphere Service Registry and Repository, a software life cycle management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70069; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 20 : lightdm-1.7.15-1.fc20 (2013-16293)

New upstream bugfix release : - Correctly set permissions on Xauthority file. - Correctly set $XDGCURRENTDESKTOP for non-autologin sessions - Fix overallocation of array for strings from greeter. - Set XDGVTNR=1 as a fallback if using SeatUnity without a functioning compositor or working VT...

Fedora 20 : moodle-2.5.2-1.fc20 (2013-16410)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

FiberHome Modem Router HG-110 - Authentication Bypass To Remote Change DNS Servers

FiberHome Modem Router HG-110 - Authentication Bypass To Remote Change DNS Servers Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage:...

Fedora 18 : moodle-2.3.9-1.fc18 (2013-16464)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...

Fedora 19 : moodle-2.4.6-1.fc19 (2013-16476)

Moodle upstream has released upstream 2.3.9, 2.4.6, and 2.5.2 versions : http://docs.moodle.org/dev/Moodle2.3.9releasenotes http://docs.moodle.org/dev/Moodle2.4.6releasenotes http://docs.moodle.org/dev/Moodle2.5.2releasenotes These releases contain unspecified security fixes, the nature of which...