Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2010-0768)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0768 advisory. 1.6.0.0-1.16.b17.0.1.el5 - Add oracle-enterprise.patch 1.6.0.0-1.16.b17.el5 - Updated 1.7.5 tarball contains additional security fixes - Resolves:...

Oracle Linux 5 : java-1.6.0-openjdk (ELSA-2010-0339)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0339 advisory. 1:1.6.0.0-1.11.b16.0.1.el5 - Add oracle-enterprise.patch 1:1.6.0.0-1.11.b16.el5 - Remove javaws alternative due to conflict with java-1.6.0-sun's...

Oracle Linux 5 : nss (ELSA-2010-0165)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0165 advisory. nspr: 4.8.4-1 - Update to NSPR 4.8.4 nss: 3.12.6-1.0.1.el54 - Update clean.gif in the nss-3.12.6-stripped.tar.bz2 tarball 3.12.6-1 - Update to 3.12.6...

Oracle Linux 5 : ghostscript (ELSA-2009-0345)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0345 advisory. 8.15.2-9.4:.4 - Avoid dividing by zero while checking for integer overflows. 8.15.2-9.4:.1 - Applied patch to fix CVE-2009-0583 bug 487742 and...

Oracle Linux 5 : wireshark (ELSA-2009-0313)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0313 advisory. 1.0.6-2.0.1.el53 - Add oracle-ocfs2-network.patch 1.0.6-2 - bring back pie - Resolves: 486551 1.0.6-1 - various security flaws fixed - upgrade to 1.0.6...

Oracle Linux 5 : httpd (ELSA-2009-1579)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1579 advisory. 2.2.3-31.0.1.el54.2 - replace index.html with Oracle's index page oracleindex.html - update vstring and distro in specfile 2.2.3-31.2 - add security...

Oracle Linux 5 / 6 : firefox (ELSA-2011-1341)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1341 advisory. firefox: 3.6.23-2.0.1.el61 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones 3.6.23-2 - Update to 3.6.23 xulrunner:...

Oracle Linux 6 : thunderbird (ELSA-2011-1342)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-1342 advisory. 3.1.15-1.0.1.el61 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Replace clean.gif in tarball 3.1.15-1 -...

Oracle Linux 5 : libpng (ELSA-2011-1104)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1104 advisory. - Install the correct fix for CVE-2011-2690 Resolves: 721303 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : openssl (ELSA-2010-0162)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0162 advisory. - fix CVE-2009-3245 - add missing bnwexpand return checks 570924 - fix CVE-2010-0433 - do not pass NULL princ to krb5ktgetentry which in the RHEL-5 and...

Oracle Linux 5 : NetworkManager (ELSA-2009-0361)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0361 advisory. - CVE-2009-0365: GetSecrets disclosure - CVE-2009-0578: local users can modify the connection settings Tenable has extracted the preceding description...

Oracle Linux 5 : openssl097a (ELSA-2010-0164)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2010-0164 advisory. 0.9.7a-9.2 - CVE-2009-3555 - support the secure renegotiation RFC 533125 Tenable has extracted the preceding description block directly from the Oracle Linux...

Oracle Linux 5 : libxslt (ELSA-2008-0649)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0649 advisory. 1.1.17-2.0.1.el52.2 - Added libxslt-enterprise.patch and replaced doc/redhat.gif in tarball 1.1.17-2.el52.2 - fix various problems in libexslt RC4...

[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users

It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...

ELSA Lancom information leak

Administrative password can be obtained by remote user in cleartextwith Web interface...

CVE-2001-1223

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...

CVE-2001-1223

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers to gain administrative privileges by connecting to the server...