438 matches found
Oracle Linux 5 : bash (ELSA-2014-3094)
The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-3094 advisory. 3.2-33.4.0.1 - Fix segfaults from CVE-2014-6277 and CVE-2014-6278 completely. orabug 19905421 Tenable has extracted the preceding description block...
MS14-072: Vulnerability in .NET Framework Could Allow Elevation of Privilege (3005210)
The remote Windows host has a version of the Microsoft .NET Framework that is affected by a vulnerability related to how it handles TypeFilterLevel checks for some malformed objects. This can be used by a remote attacker to gain privilege elevation via a specially crafted packet sent to a host th...
MS14-071: Vulnerability in Windows Audio Service Could Allow Elevation of Privilege (3005607)
The remote Windows host is affected by a vulnerability in the Windows Audio service component that allows privilege escalation. A remote attacker could exploit this vulnerability to elevate privileges but not execute code. C Tenable Network Security, Inc. include"compat.inc"; if description...
VMware vCenter Operations Management Bash Vulnerabilities (VMSA-2014-0010) (Shellshock)
The version of VMware vCenter Operations Manager installed on the remote host is prior to 5.7.3 / 5.8.3. It is, therefore, affected by the environmental variable command injection vulnerability known as 'Shellshock'. C Tenable Network Security, Inc. include'compat.inc'; if description...
Solaris 9 (sparc) : 149079-03
SunOS 5.9: bash patch. Date this patch was last updated by Sun : Sep/30/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid7811...
Solaris 9 (x86) : 149080-02
SunOS 5.9x86: bash patch. Date this patch was last updated by Sun : Sep/30/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Fedora 21 : bash-4.3.22-3.fc21 (2014-11295) (Shellshock)
Disclosure - http://www.openwall.com/lists/oss-security/2014/09/24/10 Behaviour prior to patch : $ env x=' :;; echo OOPS' bash -c /usr/sbin/nologin OOPS This account is currently not available. Note that Tenable Network Security has extracted the preceding description block directly from the Fedo...
Oracle Linux 4 : bash (ELSA-2014-3079)
Description of changes: 3.0-27.0.3 - Rework env function definition for safety Florian Weimer CVE-2014-7169 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Oracle Linux Security Advisory ELSA-2014-3079...
Solaris 10 (sparc) : 126546-06
SunOS 5.10: bash patch. Date this patch was last updated by Oracle : Sep/26/14 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
FreeBSD : bash -- remote code execution vulnerability (71ad81da-4414-11e4-a33e-3c970e169bc2) (Shellshock)
Chet Ramey reports : Under certain circumstances, bash will execute user code while processing the environment for exported function definitions. The original fix released for CVE-2014-6271 was not adequate. A similar vulnerability was discovered and tagged as CVE-2014-7169. %NASLMINLEVEL 70300 C...
MS14-036: Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (2967487)
The version of Microsoft's Graphics Component installed on the remote host is affected by code execution vulnerabilities due to the way GDI+ handles image record types in specially crafted files. A remote, unauthenticated attacker could exploit these issues by tricking a user into viewing content...
Mac OS X : Java for OS X 2013-005
The remote Mac OS X 10.7 or 10.8 host has a Java runtime that is missing the Java for OS X 2013-005 update, which updates the Java version to 1.6.065. It is, therefore, affected by multiple security vulnerabilities, the most serious of which may allow an untrusted Java applet to execute arbitrary...
Roxio Creator 9.x <= 9.0.136 Image Handling Integer Overflow
According to its version, the Roxio Creator install on the remote host is 9.x earlier than or equal to 9.0.136. It is, therefore, affected by an integer overflow vulnerability related to image handling that could allow arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"...
DISA Security Readiness Review Scripts for Solaris Local Privilege Escalation
The remote host has a copy of the DISA Security Readiness Review SRR Scripts for Solaris that is affected by a local privilege escalation vulnerability. The vulnerability could be leveraged to execute files in arbitrary directories with root privileges, as long as such files are named 'java',...
Solaris 10 (x86) : 143503-01 (deprecated)
GNOME 2.6.0x86: Trusted Extensions patch. Date this patch was last updated by Sun : Jan/08/10 This plugin has been deprecated and either replaced with individual 143503 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...
Apache 2.2 < 2.2.17 Multiple Vulnerabilities
Binary data 800577.prm...
MS13-035: Vulnerability in HTML Sanitization Component Could Allow Elevation of Privilege (2821818)
The version of InfoPath, SharePoint Server, SharePoint Foundation, Groove Server, or Office Web Apps running on the remote host is affected by an unspecified cross-site scripting vulnerability. An attacker could exploit this by tricking a user into requesting specially crafted SharePoint content,...
MS12-072: Vulnerabilities in Windows Shell Could Allow Remote Code Execution (2727528)
The version of Windows on the remote host is affected by several vulnerabilities that could allow an attacker to execute arbitrary code on the system by causing a user to browse to a specially crafted briefcase in Windows Explorer. C Tenable Network Security, Inc. include"compat.inc"; if...
MS12-035: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2693777)
The version of the .NET Framework installed on the remote host is affected by multiple vulnerabilities in the serialization process. Untrusted data is treated as trusted which could result in arbitrary code execution. C Tenable Network Security, Inc. include"compat.inc"; if description...