Ubuntu: Security Advisory (USN-2007-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1067

Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file...

CVE-2013-1067

CVE-2013-1067 affects Apport. Connected sources confirm that Apport 2.12.5 and earlier leave core-dump files created by setuid binaries with weak permissions, enabling local users to read privileged information. This is the root cause described across Red Hat, SUSE, and Ubuntu advisories. Exploit...

Fedora 19 : pmount-0.9.23-4.fc19 (2013-8906)

Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 19 : spnavcfg-0.2.1-5.fc19 (2013-8844)

Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965522. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Updated opera packages replace code signing certificate

Opera 12.16 contains a replaced code signing certificate. Opera Software recently experienced an attack on the internal infrastructure. Following best practices, Opera Software is replacing signing certificates in Opera with newly issued certificates. Certificates in Opera include the code signin...

PT-2013-6357

Name of the Vulnerable Software and Affected Versions Opera version 12.16 Description A code signing certificate replacement has been implemented due to an attack on Opera Software's internal infrastructure. The replacement affects the code signing certificate for desktop binaries and the signing...

Comodo Internet Security Unspecified Vulnerability

Comodo Internet Security is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Replaced code signing certificate

Opera Software recently experienced an attack on the internal infrastructure. Following best practices, Opera Software is replacing signing certificates in Opera with newly issued certificates. Certificates in Opera include the code signing certificate for desktop binaries and the signing...

Fedora 18 : spnavcfg-0.2.1-5.fc18 (2013-8794)

Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965522. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 17 : spnavcfg-0.2.1-5.fc17 (2013-8786)

Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965522. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 17 : pmount-0.9.23-4.fc17 (2013-8789)

Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 18 : pmount-0.9.23-4.fc18 (2013-8801)

Fix cflags to meet packaging guidelines for packages that contain suid binaries. Fixes BZ 965459. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

No-IP Dynamic Update Client 2.1.9 Stack Overflow

!/usr/bin/env python Title: No-IP Dynamic Update Client DUC 2.1.9 local IPaddress stack overflow Author: Alberto Ortega @a0rtega [email protected] Date: May 11 2013 vulnerability discovered Background: No-IP is probably the most used Dynamic DNS provider worldwide, their Dynamic Update Client D...

Hacked DNS Servers Used in Cdorked Malware Campaign

The attack that employed compromised Apache Web server binaries is turning out to be more complex than originally thought, as researchers now have found that the attackers also are using Trojaned Nginx and Lighttpd binaries as part of the campaign. More concerning, though, is the possibility that...

FreeBSD : jenkins -- multiple vulnerabilities (622e14b1-b40c-11e2-8441-00e0814cab4e)

Jenkins Security Advisory reports : This advisory announces multiple security vulnerabilities that were found in Jenkins core. - SECURITY-63 / CVE-2013-2034 This creates a cross-site request forgery CSRF vulnerability on Jenkins master, where an anonymous attacker can trick an administrator to...

gdb security and bug fix update

7.2-60.el6 - Fix CVE-2011-4355 gdb: arbitrary code execution via .debuggdbscripts' Jan Kratochvil, RH BZ 756116. 7.2-58.el6 - Fix Backport gdb fix to handle identical binaries via additional build-id symlinks' RH BZ 836966...

Compatibility Issues Affecting Signed Microsoft Binaries (2749655)

The host is installed with Microsoft Windows operating system and its missing upates according to Microsoft Security Advisory 2749655 OpenVAS Vulnerability Test $Id: gbmsdigitalcretificatetimestampissue.nasl 5346 2017-02-19 08:43:11Z cfi $ Compatibility Issues Affecting Signed Microsoft Binaries...

Compatibility Issues Affecting Signed Microsoft Binaries (2749655)

This host is missing an important security update according to Microsoft 2749655. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : rpm on SL4.x i386/x86_64

It was discovered that RPM did not remove setuid and setgid bits set on binaries when upgrading or removing packages. A local attacker able to create hard links to binaries could use this flaw to keep those binaries on the system, at a specific version level and with the setuid or setgid bit set,...