[SECURITY] Fedora 16 Update: rubygem-activesupport-3.0.10-6.fc16

Utility library which carries commonly used classes and goodies from the Rails framework...

SOL14190 - TLS/DTLS 'Lucky 13' vulnerability CVE-2013-0169

Vulnerability Recommended Actions BIG-IP FirePass Enterprise Manager ARX BIG-IP The following section describes affected BIG-IP components and how to protect those components from potential exploit. Mitigating the exploit for the MGMT interface and the Configuration utility The BIG-IP Configurati...

RHEL 5 : cman (RHSA-2009:1341)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1341 advisory. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in...

Fedora Update for rubygem-activesupport FEDORA-2013-0635

Check for the Version of rubygem-activesupport OpenVAS Vulnerability Test Fedora Update for rubygem-activesupport FEDORA-2013-0635 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

[SECURITY] Fedora 16 Update: rubygem-activesupport-3.0.10-5.fc16

Utility library which carries commonly used classes and goodies from the Rails framework...

Nagios XI Graph Explorer Component OS Command Injection Vulnerability

Added: 01/23/2013 BID: 54263 OSVDB: 83552 Background Nagios XI is a network host and service monitoring and management system. Problem Nagios XI Graph Explorer Component is vulnerable to arbitrary command execution by authenticated users. The vulnerability is due to the visApi.php script not...

SA-CONTRIB-2013-009 - Keyboard Shortcut Utility - Access Bypass - module unsupported

The Keyboard Shortcut Utility module enables you to create keyboard shortcuts on your website. You can create a shortcut to go to a page internal or external or call a JavaScript function. The module doesn't sufficiently check node access to view nodes for users who have "view shortcuts"...

CVE-2013-0655

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

Code injection

The client in Schneider Electric Software Update SESU Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and consequently execute arbitrary code, by modifying the data stream on TCP port 80...

CVE-2013-0655

The CVE-2013-0655 issue affects Schneider Electric Software Update (SESU) Utility, specifically versions 1.0.x and 1.1.x. The root cause is that the SESU client does not verify the origin of updates, enabling a man-in-the-middle to spoof updates by tampering with the data stream over TCP port 80,...

GNU Coreutils 'sort' Text Utility - Local Buffer Overflow

source: https://www.securityfocus.com/bid/57492/info GNU Coreutils is prone to a buffer-overflow vulnerability because it fails to properly bounds check user-supplied input. A local attacker can exploit this issue to crash the affected application, denying service to legitimate users. Due to the...

GNU Coreutils sort Text Utility - Local Buffer Overflow

GNU Coreutils sort Text Utility - Local Buffer Overflow source: https://www.securityfocus.com/bid/57492/info GNU Coreutils is prone to a buffer-overflow vulnerability because it fails to properly bounds check user-supplied input. A local attacker can exploit this issue to crash the affected...

Linksys WRT54GL Firmware 4.30.15 build 2 - Multiple Vulnerabilities

Linksys WRT54GL Firmware 4.30.15 build 2 - Multiple Vulnerabilities Device Name: Linksys WRT54GL v1.1 Vendor: Linksys/Cisco ============ Vulnerable Firmware Releases: ============ Firmware Version: 4.30.15 build 2, 01/20/2011 ============ Device Description: ============ The Router lets you acces...

CVE-2013-0414

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via unknown vectors related to Utility/ksh93...

CVE-2013-0399

Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Utility/Umount...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via unknown vectors related to Utility/ksh93...

CVE-2013-0414

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via unknown vectors related to Utility/ksh93...

CVE-2013-0399

Oracle Solaris 9 and 10 are affected by CVE-2013-0399 in the Solaris components Utility/Umount and Filesystem/cachefs. The vulnerability is described as unspecified, local, with potential to escalate privileges and enable an OS takeover (including arbitrary code execution), requiring login/authen...

CVE-2013-0414

CVE-2013-0414 affects Oracle Solaris 11, with the root cause in the Utility/ksh93 component. The connected Nessus NASL plugin indicates this is addressed by the Solaris jan2013 SRU13_4 patch and notes a critical update context; specific exploit vectors are not disclosed in the sources. The CVE en...

RedHat Update for OpenIPMI RHSA-2013:0123-01

Check for the Version of OpenIPMI OpenVAS Vulnerability Test RedHat Update for OpenIPMI RHSA-2013:0123-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...