USN-2255-1 neutron vulnerabilities

Darragh O'Reilly discovered that the Ubuntu packaging for OpenStack Neutron did not properly set up its sudo configuration. If a different flaw was found in OpenStack Neutron, this vulnerability could be used to escalate privileges. CVE-2013-6433 Stephen Ma and Christoph Thiel discovered that the...

openSUSE Security Update : subversion (openSUSE-SU-2013:1286-1)

Subversion was updated to 1.7.11 bnc830031 to fix bugs and security issues. - translation updates for Simplified Chinese - moddavsvn: fix incorrect path canonicalization CVE-2013-4131 - javahl bindings: fix bug in error constructing code %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : otrs (openSUSE-SU-2013:1338-1)

The ticket system OTRS was updated to 3.1.18 to fix various bugs and security issues. Update to 3.1.18 : - OSA-2013-05, CVE-2013-4717, CVE-2013-4718 fixed. - Fixed bug9561 - ACL restriction with CustomerID for DynamicFields at new Ticket screen not working. - Fixed bug9425 - Wrong created date fo...

openSUSE Security Update : clutter (openSUSE-SU-2013:1540-1)

clutter was updatd to fix improper translation of hierarchy events gnome-shell crash after system resume CVE-2013-2190, bnc843441. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : proftpd (openSUSE-SU-2013:1563-1)

proftpd was updated to 1.3.4d. - Fixed broken build when using --disable-ipv6 configure option - Fixed modsql 'SQLAuthType Backend' MySQL issues - fix for bnc843444 CVE-2013-4359 - http://bugs.proftpd.org/showbug.cgi?id=3973 - add proftpd-sftp-kbdint-max-responses-bug3973.patch - Improve systemd...

openSUSE Security Update : rubygem-i18n / rubygem-i18n-0_6 (openSUSE-SU-2013:1930-1)

This update fixes the following security issue with rubygem-i18n : - fix bnc854166: CVE-2013-4492: rubygem-i18n: missing translation XSS. File CVE-2013-4492.patch.i18n.0.6.x contains the fix. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

PT-2014-5178

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Domain Manager CDM versions 9.0.1 and earlier Description The Administration GUI in the web framework does not properly implement access control. This allows remote authenticated users to obtain sensitive...

CVE-2014-3282: Undefined Security Weakness

The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager CDM 9.0.1 and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive number-translation information by leveraging Location Administrator...

Fedora Update for qemu FEDORA-2014-5825

Check for the Version of qemu OpenVAS Vulnerability Test Fedora Update for qemu FEDORA-2014-5825 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 20 Update: qemu-1.6.2-4.fc20

QEMU is a generic and open source processor emulator which achieves a good emulation speed by using dynamic translation. QEMU has two operating modes: Full system emulation. In this mode, QEMU emulates a full system for example a PC, including a processor and various peripherials. It can be used ...

CVE-2014-3130

The ABAP Help documentation and translation tools BC-DOC-HLP in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages...

CVE-2014-3130

Technical details (affected product/version, root cause, exploit information) are not provided in the supplied documents for CVE-2014-3130; monitor for updates.

Kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper

The help function in net/netfilter/nfnatirc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information from kernel memory by establishing an IRC DCC session in which incorrect packet data is transmitted during use of the NAT mangle feature...

Cisco IOS Software Multiple Network Address Translation (NAT) Denial of Service Vulnerabilities (cisco-sa-20140326-nat)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by multiple denial of service vulnerabilities in the Network Address Translation NAT implementation : - An issue exists in the TCP Input module due to the improper handling of certain sequences...

CVE-2014-2109

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...

Cisco IOS Software Network Address Translation Vulnerabilities

The Cisco IOS Software implementation of the Network Address Translation NAT feature contains two vulnerabilities when translating IP packets that could allow an unauthenticated, remote attacker to cause a denial of service condition. Cisco has released software updates that address these...

[SECURITY] Fedora 20 Update: fwsnort-1.6.4-1.fc20

fwsnort translates Snort rules into equivalent iptables rules and generates a Bourne shell script that implements the resulting iptables commands. In addition, fwsnort optionally uses the IPTables::Parse module to parse the iptables ruleset on the machine to determine which Snort rules are applic...

[EtherApe] A graphical network monitor

EtherApe is a graphical network monitor for Unix modeled after etherman. Featuring link layer, IP and TCP modes, it displays network activity graphically. Hosts and links change in size with traffic. Color coded protocols display. It supports Ethernet, FDDI, Token Ring, ISDN, PPP, SLIP and WLAN...

CVE-2013-7002: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the glanguage parameter...

PT-2013-6227

Name of the Vulnerable Software and Affected Versions LiveZilla versions prior to 5.1.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the g language parameter in the mobile/php/translation/index.php file. Recommendations For...