Facter: Privilege escalation

Background Facter is a cross-platform Ruby library for retrieving facts from operating systems. Description Facter includes the current working directory in the search path. Impact A local attacker may be able to gain escalated privileges. Workaround There is no known workaround at this time...

TORQUE Resource Manager: Multiple vulnerabilities

Background TORQUE is a resource manager and queuing system based on OpenPBS. Description Multiple vulnerabilities have been discovered in TORQUE Resource Manager. Please review the CVE identifiers referenced below for details. Impact A context-dependent attacker may be able to gain escalated...

GLSA-201412-38 : Icecast: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201412-38 Icecast: Multiple Vulnerabilities Two vulnerabilities have been discovered in Icecast: Icecast does not properly handle shared file descriptors CVE-2014-9018 Supplementary group privileges are not changed CVE-2014-9091...

GLSA-201412-08 : Multiple packages, Multiple vulnerabilities fixed in 2010

The remote host is affected by the vulnerability described in GLSA-201412-08 Multiple packages, Multiple vulnerabilities fixed in 2010 Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. Insight Perl Tk Module...

GLSA-201412-10 : Multiple packages, Multiple vulnerabilities fixed in 2012

The remote host is affected by the vulnerability described in GLSA-201412-10 Multiple packages, Multiple vulnerabilities fixed in 2012 Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. EGroupware VTE Layer Fo...

GLSA-201412-09 : Multiple packages, Multiple vulnerabilities fixed in 2011

The remote host is affected by the vulnerability described in GLSA-201412-09 Multiple packages, Multiple vulnerabilities fixed in 2011 Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. FMOD Studio PEAR Mail...

Multiple packages, Multiple vulnerabilities fixed in 2012

Background For more information on the packages listed in this GLSA, please see their homepage referenced in the ebuild. Description Vulnerabilities have been discovered in the packages listed below. Please review the CVE identifiers in the Reference section for details. EGroupware VTE Layer Four...

GLSA-201411-08 : Aircrack-ng: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201411-08 Aircrack-ng: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in Aircrack-ng. Please review the CVE identifiers referenced below for details. Impact : A local attacker can use this...

Oracle MySQL Server <= 5.5.38 / 5.6 <= 5.6.19 Security Update (cpuoct2014) - Windows

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle Java SE JRE Multiple Unspecified Vulnerabilities-02 (Oct 2014) - Linux

Oracle Java SE JRE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Server <= 5.5.38 Security Update (cpuoct2014) - Windows

Oracle MySQL Server is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

Microsoft Windows FAT32 Disk Partition Driver Privilege Escalation Vulnerability (2998579)

This host is missing an important security update according to Microsoft Bulletin MS14-063. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Message Queuing Service Privilege Escalation Vulnerability (2993254)

This host is missing an important security update according to Microsoft Bulletin MS14-062. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Apple iTunes Insecure Permissions Privilege Escalation Vulnerability - Mac OS X

Apple iTunes is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes";...

MySQL: Multiple vulnerabilities

Background MySQL is a popular multi-threaded, multi-user SQL server. Description Multiple vulnerabilities have been discovered in MySQL. Please review the CVE identifiers referenced below for details. Impact A local attacker could possibly gain escalated privileges. A remote attacker could send a...

GLSA-201408-13 : Jinja2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201408-13 Jinja2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Jinja2. Please review the CVE identifiers referenced below for details. Impact : A local attacker could gain escalated privileges via a...

Updated kernel-vserver package fixes security vulnerabilities

Updated kernel-vserver provides upstream 3.10.51 kernel and fixes the following security issues: Array index error in the aioreadeventsring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value...

Microsoft Windows Kernel-Mode Drivers Privilege Escalation Vulnerabilities (2984615)

This host is missing an important security update according to Microsoft Bulletin MS14-045. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Installer Service Privilege Escalation Vulnerability (2962490)

This host is missing an important security update according to Microsoft Bulletin MS14-049 SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Symantec Endpoint Protection Local Client ADC Buffer Overflow Vulnerability

Description Symantec Endpoint Protection Manager is prone to a local buffer-overflow vulnerability. A local attacker may exploit this issue to execute arbitrary code with escalated privileges. Technologies Affected Symantec Endpoint Protection 11.0 Symantec Endpoint Protection 11.0 MR1 Symantec...