Ubuntu USN-698-1 (nagios)

The remote host is missing an update to nagios announced via advisory USN-698-1. OpenVAS Vulnerability Test $Id: ubuntu6981.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu6981.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-698-1 nagios Authors: Thomas Rein...

Ubuntu USN-720-1 (php5)

The remote host is missing an update to php5 announced via advisory USN-720-1. For details, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: ubuntu7201.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7201.nasl 7969 2017-12-01 09:23:16Z santu $ Description:...

Ubuntu USN-780-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory USN-780-1. OpenVAS Vulnerability Test $Id: ubuntu7801.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu7801.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-780-1 cupsys Authors: Thoma...

Ubuntu: Security Advisory (USN-778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-723-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-707-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory USN-707-1. OpenVAS Vulnerability Test $Id: ubuntu7071.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7071.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-707-1 cupsys Authors: Thomas Rein...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : cron vulnerability (USN-778-1)

It was discovered that cron did not properly check the return code of the setgid and initgroups system calls. A local attacker could use this to escalate group privileges. Please note that cron versions 3.0pl1-64 and later were already patched to address the more serious setuid check referred to ...

Ubuntu USN-776-1 (kvm)

The remote host is missing an update to kvm announced via advisory USN-776-1. OpenVAS Vulnerability Test $Id: ubuntu7761.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7761.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-776-1 kvm Authors: Thomas Reinke...

Ubuntu: Security Advisory (USN-776-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : libmodplug vulnerabilities (USN-771-1)

It was discovered that libmodplug did not correctly handle certain parameters when parsing MED media files. If a user or automated system were tricked into opening a crafted MED file, an attacker could execute arbitrary code with privileges of the user invoking the program. CVE-2009-1438 Manfred...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : libwmf vulnerability (USN-769-1)

Tavis Ormandy discovered that libwmf incorrectly used memory after it had been freed when using its embedded GD library. If a user or automated system were tricked into opening a crafted WMF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user...

Ubuntu 8.04 LTS / 8.10 / 9.04 : Apport vulnerability (USN-768-1)

Stephane Chazelas discovered that Apport did not safely remove files from its crash report directory. If Apport had been enabled at some point, a local attacker could remove arbitrary files from the system. Note that Tenable Network Security has extracted the preceding description block directly...

Ubuntu USN-762-1 (apt)

The remote host is missing an update to apt announced via advisory USN-762-1. OpenVAS Vulnerability Test $Id: ubuntu7621.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7621.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-762-1 apt Authors: Thomas Reinke...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : freetype vulnerability (USN-767-1)

Tavis Ormandy discovered that FreeType did not correctly handle certain large values in font files. If a user were tricked into using a specially crafted font file, a remote attacker could execute arbitrary code with user privileges. Note that Tenable Network Security has extracted the preceding...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : acpid vulnerability (USN-766-1)

It was discovered that acpid did not properly handle a large number of connections. A local user could exploit this and monopolize CPU resources, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

Ubuntu 8.10 : fglrx-installer vulnerability (USN-721-1)

Marko Lindqvist discovered that the fglrx installer created an unsafe LDLIBRARYPATH on 64bit systems. If a user were tricked into downloading specially crafted libraries and running commands in the same directory, a remote attacker could execute arbitrary code with user privileges. Note that...

Ubuntu 6.06 LTS / 7.10 : evolution-data-server vulnerability (USN-733-1)

It was discovered that the Base64 encoding functions in evolution-data-server did not properly handle large strings. If a user were tricked into opening a specially crafted image file, or tricked into connecting to a malicious server, an attacker could possibly execute arbitrary code with user...

Ubuntu 8.04 LTS / 8.10 : dash vulnerability (USN-732-1)

Wolfgang M. Reimer discovered that dash, when invoked as a login shell, would source .profile files from the current directory. Local users may be able to bypass security restrictions and gain root privileges by placing specially crafted .profile files where they might get sourced by other dash...

Ubuntu 7.10 / 8.04 LTS / 8.10 : LittleCMS vulnerability (USN-693-1)

It was discovered that certain gamma operations in lcms were not correctly bounds-checked. If a user or automated system were tricked into processing a malicious image, a remote attacker could crash applications linked against liblcms1, leading to a denial of service, or possibly execute arbitrar...

Ubuntu 7.10 : hplip vulnerability (USN-708-1)

It was discovered that an installation script in the HPLIP package would change permissions on the hplip config files located in user's home directories. A local user could exploit this and change permissions on arbitrary files upon an HPLIP installation or upgrade, which could lead to root...