USN-783-1: eCryptfs vulnerability

Chris Jones discovered that the eCryptfs support utilities would report the mount passphrase into installation logs when an eCryptfs home directory was selected during Ubuntu installation. The logs are only readable by the root user, but this still left the mount passphrase unencrypted on disk,...

Ubuntu USN-766-1 (acpid)

The remote host is missing an update to acpid announced via advisory USN-766-1. OpenVAS Vulnerability Test $Id: ubuntu7661.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7661.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-766-1 acpid Authors: Thomas Reinke...

Ubuntu USN-770-1 (clamav)

The remote host is missing an update to clamav announced via advisory USN-770-1. OpenVAS Vulnerability Test $Id: ubuntu7701.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7701.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-770-1 clamav Authors: Thomas Rein...

Ubuntu USN-778-1 (cron)

The remote host is missing an update to cron announced via advisory USN-778-1. OpenVAS Vulnerability Test $Id: ubuntu7781.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7781.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-778-1 cron Authors: Thomas Reinke...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : quagga vulnerability (USN-775-1)

It was discovered that the BGP service in Quagga did not correctly handle certain AS paths containing 4-byte ASNs. An authenticated remote attacker could exploit this flaw to cause bgpd to abort, leading to a denial of service. Note that Tenable Network Security has extracted the preceding...

Ubuntu 8.10 / 9.04 : moin vulnerability (USN-774-1)

It was discovered that MoinMoin did not properly sanitize its input when attaching files, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could...

USN-774-1: MoinMoin vulnerability

It was discovered that MoinMoin did not properly sanitize its input when attaching files, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could...

Ubuntu 9.04 : mpfr vulnerability (USN-772-1)

It was discovered that MPFR improperly handled string lengths in its print routines. If a user or automated system were tricked into processing specially crafted data with applications linked against MPFR, an attacker could cause a denial of service or execute arbitrary code with privileges of th...

Ubuntu 9.04 : clamav vulnerability (USN-770-1)

A flaw was discovered in the clamav-milter initscript which caused the ownership of the current working directory to be changed to the 'clamav' user. This update attempts to repair the incorrect ownership for standard system directories, but it is recommended that the following command be perform...

USN-770-1: ClamAV vulnerability

A flaw was discovered in the clamav-milter initscript which caused the ownership of the current working directory to be changed to the 'clamav' user. This update attempts to repair the incorrect ownership for standard system directories, but it is recommended that the following command be perform...

Linux Kernel 2.6 (Gentoo / Ubuntu 8.10/9.04) UDEV < 1.4.1 - Local Privilege Escalation (2)

/ cve-2009-1185.c udev http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1185 udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user...

USN-765-1: Firefox and Xulrunner vulnerabilities

It was discovered that the upstream security fixes in USN-764-1 introduced a regression which could cause the browser to crash. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the...

Ubuntu 9.04 : php5 vulnerabilities (USN-761-2)

USN-761-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 9.04. It was discovered that PHP did not sanitize certain error messages when displayerrors is enabled, which could result in browsers becoming vulnerable to cross-site scripting attacks when...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : acpid vulnerability (USN-766-1)

It was discovered that acpid did not properly handle a large number of connections. A local user could exploit this and monopolize CPU resources, leading to a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security...

USN-761-2: PHP vulnerabilities

USN-761-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 9.04. Original advisory details: It was discovered that PHP did not sanitize certain error messages when displayerrors is enabled, which could result in browsers becoming vulnerable to cross-site...

USN-766-1: acpid vulnerability

It was discovered that acpid did not properly handle a large number of connections. A local user could exploit this and monopolize CPU resources, leading to a denial of service...

CVE-2009-1191

modproxyajp.c in the modproxyajp module in the Apache HTTP Server 2.2.11 allows remote attackers to obtain sensitive response data, intended for a client that sent an earlier POST request with no request body, via an HTTP request...

USN-764-1: Firefox and Xulrunner vulnerabilities

Several flaws were discovered in the browser engine. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-1302, CVE-2009-1303, CVE-2009-1304,...