Ubuntu 12.10 : nova vulnerability (USN-1663-1)

Eric Windisch discovered that Nova did not properly clear LVM-backed images before they were reallocated which could potentially lead to an information leak. This issue only affected setups using libvirt LVM-backed instances. Note that Tenable Network Security has extracted the preceding...

USN-1663-1: Nova vulnerability

Eric Windisch discovered that Nova did not properly clear LVM-backed images before they were reallocated which could potentially lead to an information leak. This issue only affected setups using libvirt LVM-backed instances...

CVE-2012-0267

creationtimestamp| type| source ---|---|--- 2012-10-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/21839 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ntractivexstopmodule.rb 2025-02-06 03:13:40+00:0...

Fedora Update for cloud-init FEDORA-2012-14121

Check for the Version of cloud-init OpenVAS Vulnerability Test Fedora Update for cloud-init FEDORA-2012-14121 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 16 Update: cloud-init-0.6.3-0.5.bzr532.fc16

Cloud-init is a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install ssh keys and to let the user run various scripts...

[SECURITY] Fedora 18 Update: cloud-init-0.6.3-0.5.bzr532.fc18

Cloud-init is a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install ssh keys and to let the user run various scripts...

Moderate: Red Hat Security Advisory: python-paste-script security update

An updated python-paste-script package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Scientific Linux Security Update : selinux-policy on SL6.x i386/x86_64

This update fixes the following bug : - Prior to this update, the SELinux policy package did not allow the RHEV agent to execute. This update adds the policy for RHEV agents, so that they can be executed as expected. - Previously, several labels were incorrect and rules for creating new 389-ds...

CVE-2012-1889

creationtimestamp| type| source ---|---|--- 2012-06-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19186 2013-09-23 09:59:38+00:00| seen| MISP/523c662f-2958-4aaf-a65e-4005950d2109 2013-11-12 10:29:56+00:00| seen| MISP/52820098-69f4-4415-b737-4635950d2109 2014-05-24...

CVE-2012-6554

creationtimestamp| type| source ---|---|--- 2012-05-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18898 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/activecollabchat.rb 2025-02-06 03:13:41+00:00| seen|...

CVE-2012-0158

creationtimestamp| type| source ---|---|--- 2012-04-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18780 2013-07-30 07:25:04+00:00| seen| MISP/51f7672d-eef4-480c-99f0-14dc0a000b01 2013-08-02 10:04:46+00:00| seen| MISP/51c2d3d7-2b28-497a-903b-41d0ac1d4fa4 2013-08-02...

How to Run Multiple Instances of the Veeam One Client

Purpose This article documents to enable multiple instances of the Veeam ONE Client to be launched on the same machine. By default attempting to launch a second Veeam ONE Client while one is already running will change focus to the existing running Veeam ONE Client. The setting document in this...

Google Talk gtalk:// Deprecated Uri Handler Parameter Injection Vulnerability

No description provided by source. Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability tested against: Internet Explorer 8 Microsoft Windows all versions download url of 1.0.0.104: http://www.google.com/talk/install.html download urls of 1.0.0.105:...

Google Talk - gtalk: Deprecated URI Handler Injection

Google Talk - gtalk: Deprecated URI Handler Injection Google Talk gtalk:// Deprecated Uri Handler /gaiaserver Parameter Injection Vulnerability tested against: Internet Explorer 8 Microsoft Windows all versions download url of 1.0.0.104: http://www.google.com/talk/install.html download urls of...

maxdb-info NSE Script

Retrieves version and database information from a SAP Max DB database. Example Usage nmap -p 7210 --script maxdb-info Script Output PORT STATE SERVICE REASON 7210/tcp open maxdb syn-ack | maxdb-info: | Version: 7.8.02 | Build: DBMServer 7.8.02 Build 021-121-242-175 | OS: UNIX | Instroot:...

RHEL 5 : java-1.6.0-openjdk (RHSA-2011:0857)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0857 advisory. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. Integer overflow flaws were found ...

XSRF vulnerability in the Social Bookmarking plugin

We have identified and fixed a cross-site request forgery XSRF vulnerability which may affect Confluence instances in a public environment. The XSRF vulnerability is exposed in the Confluence Social Bookmarking plugin. Note that the Social Bookmarking plugin is disabled by default. If you do not...

Directory traversal

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

Server: insecure pid file directory permissions

The setup scripts in 389 Directory Server 1.2.x aka Red Hat Directory Server 8.2.x, when multiple unprivileged instances are configured, use 0777 permissions for the /var/run/dirsrv directory, which allows local users to cause a denial of service daemon outage or arbitrary process termination by...

The Cloud Makes Short Work Of Strong Encryption

A German security researcher who used a new kind of hosted offering on Amazon’s EC2 to decipher password data encrypted using the SHA1 algorithm said that cloud computing is likely to upset long held assumptions about security: putting the tools required to crack encrypted passwords and data into...