6936 matches found
Fedora 21 : bash-4.3.22-3.fc21 (2014-11295) (Shellshock)
Disclosure - http://www.openwall.com/lists/oss-security/2014/09/24/10 Behaviour prior to patch : $ env x=' :;; echo OOPS' bash -c /usr/sbin/nologin OOPS This account is currently not available. Note that Tenable Network Security has extracted the preceding description block directly from the Fedo...
Oracle Linux 4 : bash (ELSA-2014-3079)
Description of changes: 3.0-27.0.3 - Rework env function definition for safety Florian Weimer CVE-2014-7169 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2014-3079...
Oracle Linux 6 : bash (ELSA-2014-3075)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3075 advisory. 4.1.2-15.1.0.1 - Preliminary fix for CVE-2014-7169 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
Solaris 10 (sparc) : 126546-06
SunOS 5.10: bash patch. Date this patch was last updated by Oracle : Sep/26/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : bash (SSA:2014-268-01)
New bash packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2014-268-01. The text itse...
CentOS Update for bash CESA-2014:1293 centos7
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GNU Bash shell executes commands in exported functions in environment variables
Overview GNU Bash 4.3 and earlier contains a command injection vulnerability that may allow remote code execution. Description UPDATE: New CVE-IDs added for incomplete patches. Additional resources added and vendor patch information updated.CWE-78: OS Command Injection Bash supports exporting of...
FreeBSD : bash -- remote code execution vulnerability (71ad81da-4414-11e4-a33e-3c970e169bc2) (Shellshock)
Chet Ramey reports : Under certain circumstances, bash will execute user code while processing the environment for exported function definitions. The original fix released for CVE-2014-6271 was not adequate. A similar vulnerability was discovered and tagged as CVE-2014-7169. %NASLMINLEVEL 70300 C...
CVE-2014-7196
creationtimestamp| type| source ---|---|--- 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34765 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34766 2014-09-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34777 2014-10-01...
Fedora Update for kernel FEDORA-2014-11031
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
New Research Refines Security Vulnerability Metrics
Adequate security metrics have seemingly been an unattainable goal, especially when it comes to software security. Too often, organizations simply rely on vulnerability counts for flaws disclosed in an operating system or popular application as a measure of its security. But too often, variables...
CVE-2014-6436
creationtimestamp| type| source ---|---|--- 2014-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39316...
CVE-2014-6435
creationtimestamp| type| source ---|---|--- 2014-09-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39315...
OpenSSL Security Policy Made Public for First Time
OpenSSL has been having a rough go of it for some time thanks to Heartbleed and a handful of other critical vulnerabilities. Not only did those bugs put commerce and communication at risk, but they opened many people’s eyes as to how omnipresent the open source crypto implementation is. In an...
CVE-2014-1564
creationtimestamp| type| source ---|---|--- 2014-09-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39295...
Fedora Update for kernel FEDORA-2014-9959
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-5381
creationtimestamp| type| source ---|---|--- 2014-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39293...
KenBurner Slider - Unauthenticated Arbitrary File Download
The WordPress Plugin called KenBurner Slider suffers from Arbitrary File Download Vulnerability, which could allow an attacker to download the wp-config.php file and others. This issue has been spotted being exploited in the wild. PoC...