F5 Networks BIG-IP : Linux kernel vulnerability (K14445)

The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type. CVE-2013-2094 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution K14445. The text...

F5 Networks BIG-IP : Linux kernel TTY vulnerability (K15319)

The nttywrite function in drivers/tty/ntty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the 'LECHO & !OPOST' case, which allows local users to cause a denial of service memory corruption and system crash or gain privileges by triggering a race condition...

MS14-052: Cumulative Security Update for Internet Explorer (2977629)

The remote host is missing Internet Explorer IE Security Update 2977629. The version of Internet Explorer installed on the remote host is affected by multiple vulnerabilities, the majority of which are remote code execution vulnerabilities. An attacker can exploit these by convincing a user to...

ManageEngine DeviceExpert Unauthorized Information Disclosure

ManageEngine DeviceExpert exposes user names and password hashes via a specially crafted GET request for 'ReadUsersFromMasterServlet'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid77530; scriptversion"1.11";...

phpdaily (sql/xss/lfd) Multiple Vulnerabilities

No description provided by source. | | | | | / / / / / // / / / / // || || |/ // // \ | | | | ^ / / / // / // / / / // // || | | v // / / O / | | | | / \ / / / / / / / / /// // /| || | | \ / / / | | | |/ / / / / / / / / / / / / / // /| || | | |\ \ / / /\ \ | | | / /\ / // // // // // ///|||||...

hosting controller 6.1 hot fix <= 3.3 - Multiple Vulnerabilities

No description provided by source. Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary...

openSUSE Security Update : acroread (openSUSE-2012-33)

Acrobat Reader was updated to version 9.4.7 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-33. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : opera (openSUSE-2011-76)

Opera version update to 11.60 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2011-76. The text description of this plugin is C SUSE LLC. include'deprecatednasllevel.inc';...

Default Password (arkeia) for 'root' Account

The account 'root' on the remote host has the password 'arkeia'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Western Digital Arkeia is known to use these credentials to provide complete, administrative access to the virtual appliance...

Ubuntu 12.04 LTS : linux vulnerability (USN-2198-1)

A flaw was discovered in the Linux kernel's pseudo tty pty device. An unprivileged user could exploit this flaw to cause a denial of service system crash or potentially gain administrator privileges. Note that Tenable Network Security has extracted the preceding description block directly from th...

Debian DSA-2911-1 : icedove - security update

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail and news client. Multiple memory safety errors, out of bound reads, use-after-frees and other implementation errors may lead to the execution of arbitrary code, information disclosure or denial o...

Oracle Linux 6 : openssl (ELSA-2014-0376)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0376 advisory. 1.0.1e-16.7 - fix CVE-2014-0160 - information disclosure in TLS heartbeat extension Tenable has extracted the preceding description block directly from the Orac...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 8922)

This update of Adobe Flash Player fixes the following issues : - A stack overflow vulnerability that could have resulted in arbitrary code execution. CVE-2014-0498 - A memory leak vulnerability that could have been used to defeat memory address layout randomization. CVE-2014-0499 - A double free...

AIX 7.1 TL 0 : infiniband (IV43562)

Both 'ibstat' and .arp.ib. commands have security vulnerabilities that can allow a non-privileged user to run malicious code with privileged authority. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory infinibandadvisory.asc...

Oracle Linux 5 : ghostscript (ELSA-2009-0421)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0421 advisory. - Added extra checking for CVE-2009-0792 bug 491853. - Applied patch to fix CVE-2009-0792 bug 491853. Tenable has extracted the preceding description...

Oracle Linux 5 : mysql (ELSA-2010-0109)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2010-0109 advisory. - Add fixes for CVE-2009-4019, CVE-2009-4028, CVE-2009-4030 Resolves: 556505 Tenable has extracted the preceding description block directly from the...

Oracle Linux 5 : apr-util (ELSA-2009-1107)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1107 advisory. 1.2.7-7.el53.1 - add security fixes for CVE-2009-0023, CVE-2009-1955, and CVE-2009-1956 504560 Tenable has extracted the preceding description block...

Oracle Linux 5 : cups (ELSA-2009-1595)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1595 advisory. - Applied patch to fix CVE-2009-3553 bug 530111, STR 3200. Tenable has extracted the preceding description block directly from the Oracle Linux securit...

Oracle Linux 6 : nspluginwrapper (ELSA-2012-1459)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2012-1459 advisory. 1.4.4-1 - Rebase the package to latest upstream - Added Adobe reader fix 645599 Tenable has extracted the preceding description block directly from the Oracle...

Oracle Linux 5 : bind (ELSA-2009-1179)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-1179 advisory. - fix namedsdb as well CVE-2009-0696, 514292 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...