Ubuntu Update for linux-lts-quantal USN-1768-1

Check for the Version of linux-lts-quantal OpenVAS Vulnerability Test $Id: gbubuntuUSN17681.nasl 8448 2018-01-17 16:18:06Z teissa $ Ubuntu Update for linux-lts-quantal USN-1768-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu 12.10 : linux vulnerabilities (USN-1769-1)

Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...

USN-1769-1: Linux kernel vulnerabilities

Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...

USN-1768-1: Linux kernel (Quantal HWE) vulnerabilities

Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...

USN-1767-1: Linux kernel vulnerabilities

Andrew Cooper of Citrix reported a Xen stack corruption in the Linux kernel. An unprivileged user in a 32bit PVOPS guest can cause the guest kernel to crash, or operate erroneously. CVE-2013-0190 A failure to validate input was discovered in the Linux kernel's Xen netback network backend driver. ...

CVE-2013-0313

The evmupdateevmxattr function in security/integrity/evm/evmcrypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module EVM is enabled, allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via an...

Null pointer dereference

The evmupdateevmxattr function in security/integrity/evm/evmcrypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module EVM is enabled, allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via an...

CVE-2013-0313

CVE-2013-0313 affects the Linux kernel: when EVM is enabled, the evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in versions before 3.7.5 is vulnerable to a local-denial-of-service via an attempted removexattr operation on a sockfs inode, causing a NULL pointer dereference and...

CVE-2013-0313

The evmupdateevmxattr function in security/integrity/evm/evmcrypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module EVM is enabled, allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via an...

CVE-2013-0313

The evmupdateevmxattr function in security/integrity/evm/evmcrypto.c in the Linux kernel before 3.7.5, when the Extended Verification Module EVM is enabled, allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via an...

Mutare Software EVM - CSRF and XSS Vulnerabilities

Description: Mutare Software EVM 2.2.9 possibly earlier versions is vulnerable to CSRF and XSS. An attacker could do the following to a users' EVM settings: A. Change their EVM PIN B. Delete all of their voice messages C. Change or add any of their delivery address for voicemails CERT Vulnerabili...

Mutare Software EVM 2.2.9 Cross Site Request Forgery / Cross Site Scripting

Description: Mutare Software EVM 2.2.9 possibly earlier versions is vulnerable to CSRF and XSS. An attacker could do the following to a users' EVM settings: A. Change their EVM PIN B. Delete all of their voice messages C. Change or add any of their delivery address for voicemails CERT Vulnerabili...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1105

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1105

Multiple cross-site scripting XSS vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via 1 a delivery address and possibly 2 a PIN...

CVE-2011-1104

Multiple cross-site request forgery CSRF vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that 1 change a PIN, 2 delete messages, 3 add a delivery address, or 4 change a delivery address...

CVE-2011-1104

Mutare EVM is affected by multiple CSRF vulnerabilities that allow remote attackers to hijack user authentication to perform actions such as (1) changing a PIN, (2) deleting messages, (3) adding a delivery address, or (4) changing a delivery address. The provided documents describe these CSRF fla...

CVE-2011-1105

Summary: CVE-2011-1105 maps to multiple XSS vulnerabilities in Mutare EVM. The issue allows remote attackers to inject arbitrary web script or HTML via (1) a delivery address and possibly (2) a PIN. The available documents confirm the affected product (Mutare EVM) and the vulnerable vectors, but ...