[security bulletin] HPSBMU03024 rev.1 - HP Insight Control Server Deployment on Linux and Windows running OpenSSL with System Management Homepage and Systems Insight Manager, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04267749 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04267749 Version: 1 HPSBMU03024 rev....

SUSE-RU-2015:0992-1 Security update for lxc

The container framework LXC has been updated to fix various bugs and a security issue: CVE-2013-6441: The sshd template allowed privilege escalation on the host. SLES container time not aligned with host time bnc839653 SLES container boot takes ages bnc839663 lxc mounts /dev/pts with wrong option...

ESA-2014-016: EMC VPLEX Multiple Vulnerabilities

ESA-2014-016.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-016: EMC VPLEX Multiple Vulnerabilities EMC Identifier: ESA-2014-016 CVE Identifier: See below for individual CVEs Severity Rating: CVSS v2 Base Score: See below for individual CVSS scores Affected products: All versions from...

[security bulletin] HPSBMU02975 rev.1 - HP Smart Update Manager for Linux, Elevation of Privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 UPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04000397 Version: 1 HPSBMU02975 rev.1 - HP Smart Update Manager for Linux, Elevation of Privileges NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Relea...

IBM General Parallel File System 3.4 < 3.4.0.27 / 3.5 < 3.5.0.16 DoS (SLES)

A version of IBM General Parallel File System GPFS prior to 3.4.0.27 / 3.5.0.16 is installed on the remote host. It is, therefore, affected by a denial of service vulnerability. An authenticated, non-root attacker can exploit this vulnerability by passing certain arguments to 'setuid' commands,...

[EtherApe] A graphical network monitor

EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display. It supports Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP and WLAN...

SuSE 10 Security Update : Xen (ZYPP Patch Number 8359)

XEN received various security and bugfixes : - xen: Timer overflow DoS vulnerability XSA-20. CVE-2012-4535 - xen: Memory mapping failure DoS vulnerability XSA-22 The following additional bugs have beenfixed:. CVE-2012-4537 - L3: Xen BUG at ioapic.c:129 26102-x86-IOAPIC-legacy-not-first.patch...

SuSE 10 Security Update : Xen (ZYPP Patch Number 7547)

This collective June/2011 Update for Xen provides the following fixes : - Xen does not properly check the upper boundary of user-supplied data in the getfreeport function when getting a new event channel port. A local user on the guest operating system can exploit this flaw to cause denial of...

SuSE 10 Security Update : Xen (ZYPP Patch Number 7703)

This update fixes various bugs in XEN : The following security issues have been fixed : - A denial of service Host Crash in the XEN hypervisor. CVE-2011-2901 - A bug was found in the way Xen handles CPUID instruction emulation during VM exits. An unprivileged guest user can potentially use this...

SuSE Update for glibc,pam-modules,libxcrypt,pwdutils SUSE-SA:2011:035

Check for the Version of glibc,pam-modules,libxcrypt,pwdutils OpenVAS Vulnerability Test SuSE Update for glibc,pam-modules,libxcrypt,pwdutils SUSE-SA:2011:035 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

SuSE 11.1 Security Update : perl-Config-General (SAT Patch Number 4776)

This update adds the perl-Config-General to the SLES update channel, which is a new requirement after the last tgt security release. - 697106: tgt is not installable %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuS...

SUSE: Security Advisory for xorg-x11 (SUSE-SA:2011:016)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for xorg-x11 SUSE-SA:2011:016

Check for the Version of xorg-x11 OpenVAS Vulnerability Test SuSE Update for xorg-x11 SUSE-SA:2011:016 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SuSE Update for kernel SUSE-SA:2011:008

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for kernel SUSE-SA:2011:008

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2011:008 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

SuSE 11.1 Security Update : libvirt (SAT Patch Number 2957)

libvirt did not properly handle configured disk formats which potentially allowed users to read arbitrary files. CVE-2010-2237 / CVE-2010-2238 / CVE-2010-2239 Improperly mapped source privileged ports in guests may allow obtaining privileged resources on the host. CVE-2010-2242 In addition, fixes...

SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 2340)

Oracle has released JRE 6 Update 20 in order to fix potential remote code execution vulnerabilities CVE-2010-0887. Please refer to Oracle's site for more information: http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010 -0886.html %NASLMINLEVEL 70300 C Tenable Network Security,...

Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution

Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis Provencher Protek Research Lab's WebSite:...

Novell Groupwise Internet Agent IMAP LIST LSUB Code Execution

Exploit for linux platform in category dos / poc ===================================================================== Novell Groupwise Internet Agent IMAP LIST LSUB Command Code Execution ===================================================================== Application: Novell Groupwise Internet...

Novell Groupwise Internet Agent - IMAP LIST LSUB Remote Code Execution

Novell Groupwise Internet Agent - IMAP LIST LSUB Remote Code Execution Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis...