EUVD-2007-3904

Malware in sbrugna...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssl vulnerability (USN-612-1)

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...

Ubuntu 7.10 : firefox-3.0 vulnerabilities (USN-717-2)

A flaw was discovered in the browser engine when restoring closed tabs. If a user were tricked into restoring a tab to a malicious website with form input controls, an attacker could steal local files on the user's system. CVE-2009-0355 Wladimir Palant discovered that Firefox did not restrict...

Ubuntu 7.10 / 8.04 LTS : moodle vulnerability (USN-658-1)

Lukasz Pilorz discovered that the HTML filtering used in Moodle was not strict enough. A remote attacker could send malicious requests to Moodle and execute arbitrary code as the web server user. Note that Tenable Network Security has extracted the preceding description block directly from the...

Ubuntu 7.10 : firefox vulnerabilities (USN-690-2)

Several flaws were discovered in the browser engine. These problems could allow an attacker to crash the browser and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Firefox could be bypassed by utilizing XBL-bindings. An...

Ubuntu 7.10 : hplip vulnerabilities (USN-674-2)

USN-674-1 provided packages to fix vulnerabilities in HPLIP. Due to an internal archive problem, the updates for Ubuntu 7.10 would not install properly. This update provides fixed packages for Ubuntu 7.10. We apologize for the inconvenience. It was discovered that the hpssd tool of hplip did not...

Ubuntu 7.10 / 8.04 LTS / 8.10 : compiz-fusion-plugins-main vulnerability (USN-688-1)

It was discovered that the Expo plugin for Compiz did not correctly restrict the screensaver window from being moved with the mouse. A local attacker could use the mouse to move the screensaver off the screen and gain access to the locked desktop session underneath. Default installs of Ubuntu wer...

Ubuntu 7.10 / 8.04 LTS / 8.10 : network-manager-applet vulnerabilities (USN-727-1)

It was discovered that network-manager-applet did not properly enforce permissions when responding to dbus requests. A local user could perform dbus queries to view other users' network connection passwords and pre-shared keys. CVE-2009-0365 It was discovered that network-manager-applet did not...

Ubuntu 7.10 / 8.04 LTS : amarok vulnerability (USN-657-1)

Dwayne Litzenberger discovered that Amarok created temporary files in an insecure way. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. CVE-2008-3699. Note that Tenable Network Security has extracted the preceding...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : openoffice.org, openoffice.org-amd64 vulnerabilities (USN-677-1)

Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a specially crafted document, a remote attacker might be able to execute arbitrary code with user privileges. CVE-2008-2237, CVE-2008-2238 Dmitry E. Oboukhov...

Ubuntu: Security Advisory (USN-760-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for openssl-blacklist update USN-612-9

Ubuntu Update for Linux kernel vulnerabilities USN-612-9 OpenVAS Vulnerability Test $Id: gbubuntuUSN6129.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssl-blacklist update USN-612-9 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for rsync vulnerability USN-600-1

Ubuntu Update for Linux kernel vulnerabilities USN-600-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6001.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for rsync vulnerability USN-600-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1

Ubuntu Update for Linux kernel vulnerabilities USN-559-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5591.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mysql-dfsg-5.0 vulnerabilities USN-559-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for evolution vulnerability USN-583-1

Ubuntu Update for Linux kernel vulnerabilities USN-583-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5831.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for evolution vulnerability USN-583-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for ghostscript, gs-esp, gs-gpl vulnerability USN-599-1

Ubuntu Update for Linux kernel vulnerabilities USN-599-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5991.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ghostscript, gs-esp, gs-gpl vulnerability USN-599-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH...

Ubuntu Update for mozilla-thunderbird, thunderbird vulnerabilities USN-629-1

Ubuntu Update for Linux kernel vulnerabilities USN-629-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6291.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for mozilla-thunderbird, thunderbird vulnerabilities USN-629-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networ...

Ubuntu Update for libvirt vulnerability USN-694-1

Ubuntu Update for Linux kernel vulnerabilities USN-694-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN6941.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libvirt vulnerability USN-694-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for dovecot vulnerability USN-567-1

Ubuntu Update for Linux kernel vulnerabilities USN-567-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5671.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for dovecot vulnerability USN-567-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for libgd2 vulnerability USN-557-1

Ubuntu Update for Linux kernel vulnerabilities USN-557-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5571.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libgd2 vulnerability USN-557-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...