CentOS Security Advisory CESA-2009:0018 (xterm)

The remote host is missing updates to xterm announced in advisory CESA-2009:0018. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-onl...

Fedora 9 : gallery2-2.3-1.fc9 (2008-11258)

New version, multiple fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

F-Secure RPM Parsing Integer Overflow RCE (FSC-2008-3)

The version of F-Secure Anti-Virus installed on the remote host is affected by an integer overflow condition. Provided F-Secure is configured to scan inside compressed archives, an attacker can exploit this issue, via a specially crafted RPM file, to execute arbitrary code. Note that, in a typica...

Fedora 8 : wordpress-2.6.5-2.fc8 (2008-10468)

http://wordpress.org/development/2008/11/wordpress-265/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

openSUSE 10 Security Update : lighttpd (lighttpd-5785)

Various issues have been fixed in lighttpd. CVE-2008-4298, CVE-2008-4359 and CVE-2008-4360 have been assigned to thess issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update lighttpd-5785. Th...

Fedora 9 : openoffice.org-2.4.2-18.1.fc9 (2008-9313)

Security update to address - CVE-2008-2237: Manipulated WMF files - CVE-2008-2238: Manipulated EMF files as described at http://www.openoffice.org/security/bulletin.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 8 : squirrelmail-1.4.16-1.fc8 (2008-9071)

update to 1.4.16 fixes CVE-2008-3663 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

F-Secure产品RPM文件解析整数溢出漏洞

BUGTRAQ ID: 31846 F-Secure Internet Gatekeeper和F-Secure Anti-Virus都是芬兰的一家杀毒软件厂商所发布的杀毒产品。 F-Secure产品在解析RPM文件时存在整数溢出漏洞。如果将杀毒软件配置为扫描压缩文档内部的话，打开恶意RPM文件就会触发这个溢出，导致执行任意指令。 F-Secure Anti-Virus Linux Server Security 5.54 F-Secure Anti-Virus Linux Client Security 5.54 F-Secure Anti-Virus for Workstations...

openSUSE 10 Security Update : opera (opera-5695)

This update of opera fixes several security problems. See: http://www.opera.com/docs/changelogs/linux/960/sec %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-5695. The text description o...

Fedora 9 : mantis-1.1.4-1.fc9 (2008-8925)

This releases fixes CVE-2008-3102 and a bunch of other issues. For the full changelog, please check: http://www.mantisbt.org/bugs/changelogpage.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 8 : cups-1.3.9-1.fc8 (2008-8801)

Security release. This updates to 1.3.9 and fixes three integer overflows in the CUPS text and image filters. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 9 : neon-0.28.3-1.fc9 (2008-7661)

This update includes the latest release of neon, fixing a security issue in the Digest authentication domain parameter support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

openSUSE 10 Security Update : cups (cups-5652)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Gentoo Security Advisory GLSA 200611-08 (rpm)

The remote host is missing updates announced in advisory GLSA 200611-08. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200611-08 (rpm)

The remote host is missing updates announced in advisory GLSA 200611-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

[SECURITY] Fedora 8 Update: fedora-package-config-apt-8-2.transitional

This package contains apt-rpm configuration files for Fedora Core, Updates and Extras...

[SECURITY] Fedora 9 Update: fedora-package-config-apt-9-3.transitional

This package contains apt-rpm configuration files for Fedora Core, Updates and Extras...

openSUSE 10 Security Update : gnutls (gnutls-5275)

Multiple issues have been fixed in gnutls: CVE-2008-1948 GNUTLS-SA-2008-1-1, CVE-2008-1949 GNUTLS-SA-2008-1-2 and CVE-2008-1950 GNUTLS-SA-2008-1-3 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

libxml XML实体名堆缓冲区溢出漏洞

BUGTRAQ ID: 31126 CVE ID：CVE-2008-3529 CNCVE ID：CNCVE-20083529 libxml软件包提供允许用户操控XML文件的函数库，包含有读、修改和写XML和HTML文件支持。 libxml处理畸形XML内容时存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 当libxml2处理超长XML实体名时存在基于堆的缓冲区溢出，如果应用程序链接libxml2处理不可信的畸形XML内容，可导致应用程序崩溃或任意代码执行。 XMLSoft Libxml2 2.6.31 XMLSoft Libxml2 2.6.30 XMLSoft Libxm...

Fedora 8 : amarok-1.4.10-1.fc8 (2008-7719)

Amarok 1.4.10 has been released to fix a security problem. For more information please see http://amarok.kde.org/en/node/535/ Please update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...