Ubuntu 14.04 LTS : OpenStack Neutron vulnerabilities (USN-2321-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2321-1 advisory. Liping Mao discovered that OpenStack Neutron did not properly handle requests for a large number of allowed address pairs. A remote authenticated attacke...

Ubuntu 14.04 LTS : OpenStack Glance vulnerability (USN-2322-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2322-1 advisory. Thomas Leaman and Stuart McLaren discovered that OpenStack Glance did not properly honor the imagesizecap configuration option. A remote authenticated attacker...

Tenable Appliance Check (deprecated)

This plugin was previously used to detect if the local scanner was using the Tenable Appliance. It is no longer needed, and is now obsolete. %NASLMINLEVEL 999999 @DEPRECATED@ C Tenable Network Security, Inc. include"compat.inc"; if description scriptid77329; scriptversion "1.2"; scriptcvsdate"Dat...

KLA10269 OSI vulnerability in Nessus

An unspecified vulnerability was found in Nessus. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely at a point related to Web UI. Original advisories - Related products Nessus CVE list CVE-2014-4980 warning Solution...

Tenable Log Correlation Engine (LCE) Unix / Linux Client Installed (credentialed check)

Binary data lceclientinstalledunix.nbin...

Tenable Log Correlation Engine (LCE) Client Installed (macOS credentialed check)

Binary data lceclientinstalledmacosx.nbin...

Tenable Log Correlation Engine Client for Windows SEoL

According to its version, the installation of the Tenable Log Correlation Engine LCE Client for Windows on the remote host is is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is...

Tenable Log Correlation Engine Client SEoL

According to its version, the installation of the Tenable Log Correlation Engine LCE Client on the remote host is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to conta...

Tenable Log Correlation Engine Client for Mac OS X SEoL

According to its version, the installation of the Tenable Log Correlation Engine LCE Client for Mac OS X on the remote host is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is...

Tenable Log Correlation Engine (LCE) Windows Client Installed (credentialed check)

Binary data lceclientinstalledwin.nbin...

Ubuntu 10.04 LTS : openssl vulnerabilities (USN-2232-4)

USN-2232-1 fixed vulnerabilities in OpenSSL. One of the patch backports for Ubuntu 10.04 LTS caused a regression for certain applications. This update fixes the problem. We apologize for the inconvenience. Juri Aedla discovered that OpenSSL incorrectly handled invalid DTLS fragments. A remote...

Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-2318-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2318-1 advisory. Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel's user namespace subsystem. An unprivileged user could exploit...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2317-1)

Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel's user namespace subsystem. An unprivileged user could exploit this flaw to by-pass mount restrictions, and potentially gain administrative privileges. CVE-2014-5207 Kenton Varda discovered a flaw with...

Ubuntu 14.04 LTS : serf vulnerability (USN-2315-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2315-1 advisory. Ben Reser discovered that serf did not correctly handle SSL certificates with NUL bytes in the CommonName or SubjectAltNames fields. A remote attacker could explo...

Fedora 19 : httpd-2.4.10-1.fc19 (2014-9057)

This update includes the latest stable release of the Apache HTTP Server, httpd 2.4.10, fixing a number of security issues. http://www.apache.org/dist/httpd/Announcement2.4.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Ubuntu 10.04 LTS / 12.04 LTS : openjdk-6 vulnerabilities (USN-2312-1)

Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. CVE-2014-2490, CVE-2014-4216, CVE-2014-4219, CVE-2014-4262 Several...

Oracle Linux 6 / 7 : unbreakable enterprise kernel (ELSA-2014-3067)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3067 advisory. - net: Use netlinknscapable to verify the permisions of netlink messages Eric W. Biederman Orabug: 19404231 CVE-2014-0181 Tenable has extracted the...

MS14-048: Vulnerability in OneNote Could Allow Remote Code Execution (2977201)

The remote host is running a version of Microsoft OneNote that is affected by a remote code execution vulnerability. By convincing a user to open a specially crafted OneNote file, a remote attacker can create an executable file in a Startup folder and thereby execute arbitrary code with current...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3069)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3069 advisory. kernel-uek 2.6.32-400.36.7uek - sctp: Fix skackbacklog wrap-around problem Xufeng Zhang Orabug: 19404246 CVE-2014-4667 Tenable has extracted the preceding...

Fedora 19 : kernel-3.14.15-100.fc19 (2014-9142)

The 3.14.15 stable update contains a number of important fixes across the tree. The 3.14.14 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...