CVE-2012-0948

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for 1 apt-clonesystemstate.tar.gz and 2 systemstate.tar.gz, which allows local users to obtain repository credentials...

CVE-2012-0948

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for 1 apt-clonesystemstate.tar.gz and 2 systemstate.tar.gz, which allows local users to obtain repository credentials...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : ubuntuone-client vulnerability (USN-1465-1)

It was discovered that the Ubuntu One Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information. Note that Tenable Network Securi...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : ubuntuone-storage-protocol update (USN-1465-2)

USN-1465-1 fixed a vulnerability in the Ubuntu One Client. This update adds a required fix to the Ubuntu One storage protocol library. It was discovered that the Ubuntu One Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a...

USN-1465-1: Ubuntu One Client vulnerability

It was discovered that the Ubuntu One Client incorrectly validated server certificates when using HTTPS connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information...

USN-1462-1: Bind vulnerabilities

Dan Luther discovered that Bind incorrectly handled zero length rdata fields. A remote attacker could use this flaw to cause Bind to crash or behave erratically, resulting in a denial of service. CVE-2012-1667 It was discovered that Bind incorrectly handled revoked domain names. A remote attacker...

Ubuntu Update for nut USN-1456-1

Ubuntu Update for Linux kernel vulnerabilities USN-1456-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14561.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nut USN-1456-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1460-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-1460-1: Linux kernel (OMAP4) vulnerabilities

A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. CVE-2012-1601 Steve Grubb reported a flaw with Linux fscaps file system base capabilities when used to increa...

Ubuntu Update for net-snmp USN-1450-1

Ubuntu Update for Linux kernel vulnerabilities USN-1450-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14501.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for net-snmp USN-1450-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu Update for feedparser USN-1449-1

Ubuntu Update for Linux kernel vulnerabilities USN-1449-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14491.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for feedparser USN-1449-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

Ubuntu Update for openssl USN-1451-1

Ubuntu Update for Linux kernel vulnerabilities USN-1451-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14511.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for openssl USN-1451-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for backuppc USN-1444-1

Ubuntu Update for Linux kernel vulnerabilities USN-1444-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14441.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for backuppc USN-1444-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu Update for linux USN-1448-1

Ubuntu Update for Linux kernel vulnerabilities USN-1448-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14481.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1448-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu: Security Advisory (USN-1443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for libxml2 USN-1447-1

Ubuntu Update for Linux kernel vulnerabilities USN-1447-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14471.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libxml2 USN-1447-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2012-0949

The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report...

Ubuntu Update for horizon USN-1439-1

Ubuntu Update for Linux kernel vulnerabilities USN-1439-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14391.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for horizon USN-1439-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

USN-1439-1: Horizon vulnerabilities

Matthias Weckbecker discovered a cross-site scripting XSS vulnerability in Horizon via the log viewer refrash mechanism. If a user were tricked into viewing a specially crafted log message, a remote attacker could exploit this to modify the contents or steal confidential data within the same...

Ubuntu: Security Advisory (USN-1438-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...