Oracle Linux 5 : java-1.7.0-openjdk (ELSA-2014-0407)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0407 advisory. 1.7.0.55-2.4.7.1.0.1.el510 - Add oracle-enterprise.patch - Fix DISTRONAME to 'Enterprise Linux' 1.7.0.55-2.4.7.1.el5 - regenerated sources to fix TCK...

Solaris 10 (sparc) : 150400-06

SunOS 5.10: Kernel Patch. Date this patch was last updated by Sun : Dec/13/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is has been withdrawn. Disabled on 2014/02/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

CentOS Update for pixman CESA-2013:1869 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated qemu package fixes security vulnerability

A buffer overflow flaw was found in the way QEMU processed the SCSI "REPORT LUNS" command when more than 256 LUNs were specified for a single SCSI target. A privileged guest user could use this flaw to corrupt QEMU process memory on the host, which could potentially result in arbitrary code...

[Umap] The USB host security assessment tool

umap is a tool which allows you to test the security of USB host implementations i.e. something you plug a USB device into, like a PC or a tablet. Its primary function at the moment is a fuzzer with test cases based on a combination of data from standards documentation and the author's experience...

Oracle Java SE Unspecified Vulnerability - Feb 13 (Windows)

This host is installed with Oracle Java SE and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gboraclejavaseunspecifiedvulnfeb13win.nasl 7699 2017-11-08 12:10:34Z santu $ Oracle Java SE Unspecified Vulnerability - Feb 13 Windows Authors: Arun Kallavi Copyright: Copyright c...

Progea Movicon 11 - TCPUploadServer Remote File System

Progea Movicon 11 - TCPUploadServer Remote File System !/usr/bin/python movi.py Progea Movicon TCPUploadServer Remote Exploit Jeremy Brown / jbrown at patchtuesday dot org Mar 2011 TCPUploadServer allows remote users to execute functions on the server without any form of authentication. Impacts...

AIX 610005 : U837133

The remote host is missing AIX PTF U837133 which is related to the security of the package bos.rte.libcfg.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

MDVA-2009:261 : kdepim4

In Mandriva 2010.0, because of a regression, the KTimetracker menu was missing many options, which made it unusable. Also in Mandriva 2010.0, when using Knotes inside Kontact the note title was left-cutted when using a long title. This update fixes these issues. %NASLMINLEVEL 70300 @DEPRECATED@...

GLSA-200812-10 : Archive::Tar: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200812-10 Archive::Tar: Directory traversal vulnerability Jonathan Smith of rPath reported that Archive::Tar does not check for '..' in file names. Impact : A remote attacker could entice a user or automated system to extract a...

Format string

The driveinit function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted...

Opera < 9.26 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly is affected by several issues : - Simulated text input could trick users into uploading arbitrary files. - Image properties comments containing script will be run when displaying the image properties, leading to code execution in the...

Cross site request forgery (csrf)

The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExtension, which allows local users to access kernel memory and execute arbitrary code via a crafted request...

Microsoft Expression Media Plaintext Password Storage Weakness

CVE-2007-5470 Microsoft Expression Media is prone to a weakness because passwords are stored in plain-text format. This issue stems from a design error in the catalog password-protection feature. Attackers could use this issue in conjunction with other vulnerabilities in a host to gain access to...

Oracle JInitiator beans.ocx ActiveX Multiple Buffer Overflows

The remote host contains one or more versions of the 'beans.ocx' ActiveX control, distributed as a part of Oracle JInitiator. The version of at least one of these controls on the remote host reportedly is affected by multiple and as-yet unspecified stack buffer overflows in its initialization...

GLSA-200708-03 : libarchive (formerly named as bsdtar): Multiple PaX Extension Header Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200708-03 libarchive formerly named as bsdtar: Multiple PaX Extension Header Vulnerabilities CPNI, CERT-FI, Tim Kientzle, and Colin Percival reported a buffer overflow CVE-2007-3641, an infinite loop CVE-2007-3644, and a NULL...

Sudo: local root compromise with krb5 enabled

The 'sudo' package can be built to use Kerberos 5 for authentication of users. When a user is properly authenticated to sudo, sudo grants that user potentially limited root privileges. Thus a mistake in the authentication code in sudo is potentially severe: it can lead to a local root compromise...

On internal Unix host common security vulnerability description-vulnerability warning-the black bar safety net

Impact: Intruders can use this vulnerability to modify web pages, to get the host management rights. Event description: In attacks of UNIX systems, intruders often use the following | rpc. ttdbserver rpc. cmsd rpc. statd/automountd sadmind --- The program of the Buffer Overflow vulnerability from...

Solaris 5.6 (sparc) : 109662-03

Solaris ISP Server 2.0: /usr/lib/inet/in.ftpd patch. Date this patch was last updated by Sun : Jun/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. ...

Solaris 6 (sparc) : 110971-22

Sun Management Center 3.0: RR Patch for Solaris 2.6. Date this patch was last updated by Sun : Apr/08/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...