RHEL 5 / 6 : flash-plugin (RHSA-2011:0850)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0850 advisory. - flash-plugin: Cross-site scripting vulnerability APSB11-13 CVE-2011-2107 Note that Nessus has not tested for this issue but has instead relied...

CVE-2011-1958

Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows user-assisted remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted Diameter dictionary file...

RedHat Update for kernel RHSA-2011:0833-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for postfix RHSA-2011:0843-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for apr RHSA-2011:0844-01

Check for the Version of apr OpenVAS Vulnerability Test RedHat Update for apr RHSA-2011:0844-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RHEL 4 : gimp (RHSA-2011:0837)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0837 advisory. - Gimp: Integer overflow in the BMP image file plugin CVE-2009-1570 - Gimp: Stack-based buffer overflow in SphereDesigner plug-in...

RHEL 5 : systemtap (RHSA-2011:0841)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0841 advisory. - systemtap: does not guard against DWARF operations div-by-zero errors, which can cause a kernel panic CVE-2011-1769 Note that Nessus has not tested...

RHEL 6 : tomcat6 (RHSA-2011:0791)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0791 advisory. Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. It was found that web applications could...

[PRE-SA-2011-04] Heap overflow in EFI partition handling code of the Linux kernel

PRE-CERT Security Advisory ========================== Advisory: PRE-SA-2011-04 Released on: 10 May 2011 Last updated on: 10 May 2011 Affected product: Linux Kernel 2.4 and 2.6 Impact: information disclosure, denial-of-service Origin: storage devices Credit: Timo Warns PRESENSE Technologies GmbH C...

Linux Kernel 'CAP_NET_ADMIN'未授权访问漏洞

Bugtraq ID: 47792 CVE ID：CVE-2011-1019 Linux是一款开放源代码的操作系统。 devload存在一个缺陷允许有CAPNETADMIN capability的本地用户从"/lib/modules/"装载任意模块，而本来只限装载与网络相关的模块如netdev。 Linux kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： https://bugzilla.redhat.com/showbug.cgi?id=680360...

ISC BIND 9 RRSIG Query类型远程拒绝服务漏洞

BUGTRAQ ID: 47734 CVE ID: CVE-2011-1907 BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND在实现上存在远程拒绝服务漏洞，由于未能正确处理某些记录类型，攻击者可利用此漏洞造成应用程序进程崩溃，拒绝服务合法用户。 此问题仅影响将配置的RPZ功能用于RRset替换的BIND用户。BIND...

RHEL 4 : python (RHSA-2011:0491)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0491 advisory. Python is an interpreted, interactive, object-oriented programming language. A flaw was found in the Python urllib and urllib2 libraries whe...

RedHat Update for nss RHSA-2011:0472-01

Check for the Version of nss OpenVAS Vulnerability Test RedHat Update for nss RHSA-2011:0472-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for seamonkey RHSA-2011:0473-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2011:0473-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for nss RHSA-2011:0472-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1169

Array index error in the asihpihpiioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service memory corruption or possibly gain privileges via a crafted adapter index value that triggers acce...

RHEL 4 : gstreamer-plugins (RHSA-2011:0477)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0477 advisory. - libmodplug: Integer overflow when reading samples of AMF files CVE-2006-4192 - libmodplug: ReadS3M stack overflow vulnerability...

CVE-2011-1589

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

seamonkey security update

1.0.9-70.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-70.el4 - Added fixes for mozbz645565 and mozbz646460 1.0.9-69.el4 - Added fixes from 1.9.1.19...

RHEL 4 : seamonkey (RHSA-2011:0473)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0473 advisory. - Mozilla use after free flaw MFSA 2011-12 CVE-2011-0072 - Mozilla dangling pointer flaw MFSA 2011-13 CVE-2011-0073 - Mozilla crash from...