Oracle Linux 5 : libpng (ELSA-2009-0333)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0333 advisory. 1.2.10-7.1.el53.2 - Back-port fixes for CVE-2008-1382 and CVE-2009-0040. Resolves: 487168 Tenable has extracted the preceding description block directl...

Oracle Linux 5 : firefox (ELSA-2010-0501)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0501 advisory. devhelp: 0.12-21 - Rebuild against xulrunner esc: 1.1.0-12 - Rebuild for xulrunner update firefox: 3.6.4-8.0.1.el5 - Add firefox-oracle-default-prefs.j...

Oracle Linux 5 : Moderate: / evolution-data-server (ELSA-2007-0344)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-0344 advisory. 1.8.0-15.0.3.el5 - Add patch for RH bug 235289 APOP authentication vulnerability. 1.8.0-15.0.2.el5 - Remove Makefile.in changes that accidentally slipped into t...

Oracle Linux 5 : firefox (ELSA-2009-0397)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0397 advisory. xulrunner: 1.9.0.7-3.0.1.el5 - Added xulrunner-oracle-default-prefs.js and removed the corresponding RedHat one 1.9.0.7-3 - Updated per 1.9.0.8 firefox...

Oracle Linux 5 : mysql (ELSA-2010-0109)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0109 advisory. - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030 Resolves: 556505 Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 : kernel (ELSA-2010-0723)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0723 advisory. - misc make compatallocuserspace incorporate the accessok Don Howard 634463 634464 CVE-2010-3081 - fs xfs: fix missing untrusted inode lookup tag Dave...

Oracle Linux 5 / 6 : thunderbird (ELSA-2013-0145)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2013-0145 advisory. 10.0.12-3.0.1.el63 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 10.0.12-3 - Update to 10.0.12 ESR Tenabl...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2047)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2047 advisory. - mm/hotplug: correctly add new zone to all other nodes zone lists Jiang Liu Orabug: 16020976 Bug-db: 14798 CVE-2012-5517 - Divide by zero in TCP...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2013-2507)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-2507 advisory. - vhost: fix length for cross region descriptor Michael S. Tsirkin Orabug: 16387183 CVE-2013-0311 - x86/xen: don't assume %ds is usable in xeniret...

Oracle Linux 6 : kernel (ELSA-2012-1580)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-1580 advisory. - net fix divide by zero in tcp algorithm illinois Flavio Leitner 871920 866514 CVE-2012-4565 - net nfs: Fix buffer overflow checking in...

Oracle Linux 6 : kernel (ELSA-2013-0630)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0630 advisory. - kernel utrace: ensure archptrace/ptracerequest can never race with SIGKILL Oleg Nesterov 912073 912074 CVE-2013-0871 - x86 msr: Add capabilities chec...

Oracle Linux 5 : kvm (ELSA-2013-0608)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0608 advisory. kvm-83-262.0.1.el59.1 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-262.el51 -...

Oracle Linux 5 : xen (ELSA-2012-1236)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1236 advisory. 3.0.3-135.el58.5 - console: Prevent escape sequence length overflow rhbz 851253 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 6 : kernel (ELSA-2013-0567)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0567 advisory. 2.6.32-358.0.1 - kernel utrace: ensure archptrace/ptracerequest can never race with SIGKILL Oleg Nesterov 912073 912074 CVE-2013-0871 Tenable has extracted the...

Oracle Linux 5 : xen (ELSA-2013-0599)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0599 advisory. 3.0.3-142.el59.2 - e1000: discard packets that are too long if !SBP and !LPE rhbz 910843 - e1000: discard oversized packets based on SBP|LPE rhbz 910843 Tenable...

Oracle Linux 6 : kernel (ELSA-2013-0744)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0744 advisory. - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - virt kvm: do not GP on unaligned MSRKVMSYSTEMTIME writ...

Oracle Linux 5 / 6 : gnutls (ELSA-2013-0883)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0883 advisory. 2.8.5-10.2 - fix CVE-2013-2116 - fix DoS regression in CVE-2013-1619 upstream patch 966754 Tenable has extracted the preceding description block directly fr...

[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users

It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...

ELSA Lancom information leak

Administrative password can be obtained by remote user in cleartextwith Web interface...

CVE-2001-1223

The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...