Citrix XenServer Multiple Vulnerabilities (CTX227185)

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities as noted in the CTX227185 advisory. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103381; scriptversion"1.7";...

Oracle Enterprise Manager Grid Control Multiple Vulnerabilities (April 2017 CPU) (SWEET32)

The version of Oracle Enterprise Manager Grid Control installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities : - Multiple integer overflow conditions exist in the OpenSSL component in s3srvr.c, sslsess.c, and t1lib.c due to improper use of...

AIX 7.2 TL 0 : sysproc (IV91456)

https://vulners.com/cve/CVE-2016-8944 https://vulners.com/cve/CVE-2016-8944 IBM AIX allows a local user to open a file with a specially crafted argument that would crash the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security...

F5 Networks BIG-IP : OpenSSH vulnerability (K14845276)

When SSHD tries to authenticate a non-existing user, it will pick up a fake password structure hard-coded in the SSHD source code. An attacker can measure timing information to determine if a user exists when verifying a password. CVE-2016-6210 C Tenable Network Security, Inc. The descriptive tex...

Oracle E-Business Multiple Vulnerabilities (April 2016 CPU)

The version of Oracle E-Business installed on the remote host is missing the April 2016 Oracle Critical Patch Update CPU. It is, therefore, affected by vulnerabilities in the following components : - An unspecified flaw exists in the DB Privileges subcomponent of the Oracle Applications Object...

VMware ESX Multiple Vulnerabilities (VMSA-2010-0013) (remote check)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries : - GNU cpio - GNU cpio on 64-bit - GNU tar - Kerberos 5 - Perl - PostgreSQL -...

VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0004) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including arbitrary code execution vulnerabilities, in several third-party components and libraries : - bind - pam - popt - rpm - rpm-libs - rpm-python - Service Location...

VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2011-0007) (remote check)

The remote VMware ESX / ESXi host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities : - Multiple forgery vulnerabilities exist in the bundled version of MIT Kerberos 5 krb5. An attacker can exploit these issues to impersonate a client, escalate privileges...

VMware ESXi updates address important guest privilege escalation vulnerability (VMSA-2016-0001) - Remote Version Check

VMware ESXi updates address important guest privilege escalation vulnerability SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Solaris 8 (sparc) : 152076-51

JavaSE 6: update 151 patch equivalent to JDK 6u151. Date this patch was last updated by Sun : Apr/17/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

F5 Networks BIG-IP : BIG-IP management interface vulnerability (SOL9875)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL9875. The text description of this plugin is C F5 Networks...

AIX 6.1 TL 8 : X11.base.rte (U865364)

The remote host is missing AIX PTF U865364, which is related to the security of the package X11.base.rte. Use-after-free vulnerability in the doImageText function in dix/dixfonts.c in the xorg-server module before 1.14.4 in X.Org X11 allows remote authenticated users to cause a denial of service...

Cisco IOS XR Software Static Punt Policer DoS (CSCun83985)

According to its self-reported version, the version of Cisco IOS XR running on the remote host is affected by a denial of service vulnerability due to a missing static punt policer. A remote, unauthenticated attacker can cause the device to lock up by rapidly sending specially crafted packets. No...

VMSA-2014-0004 VMware product updates address OpenSSL security vulnerabilities

VMware product updates address OpenSSL security vulnerabilities. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0004.nasl 6759 2017-07-19 09:56:33Z teissa $ VMSA-2014-0004: VMware product updates address OpenSSL security vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone...

VMSA-2014-0003 VMware vSphere Client updates address security vulnerabilities

VMware vSphere Client updates address security vulnerabilities OpenVAS Vulnerability Test $Id: gbVMSA-2014-0003.nasl 6663 2017-07-11 09:58:05Z teissa $ VMSA-2014-0003: VMware vSphere Client updates address security vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone...

AIX 6.1 TL 6 : bos.net.tcp.client (U849877)

The remote host is missing AIX PTF U849877, which is related to the security of the package bos.net.tcp.client. AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially craft...

VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX (remote check)

VMware ESXi and ESX unauthorized file access through vCenter Server and ESX OpenVAS Vulnerability Test $Id: gbVMSA-2013-0016remote.nasl 6074 2017-05-05 09:03:14Z teissa $ VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX remote check Authors: Michael Meyer...

VMSA-2013-0014 VMware Workstation, Fusion, ESXi and ESX patches address a guest privilege escalation (remote check)

VMware Workstation, Fusion, ESXi and ESX patches address a vulnerability in the LGTOSYNC.SYS driver which could result in a privilege escalation on older Windows-based Guest Operating Systems. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0014remote.nasl 6093 2017-05-10 09:03:18Z teissa $...

Cisco ASA Next-Generation Firewall Fragmented Traffic DoS (cisco-sa-20130626-ngfw)

The remote Cisco ASA NGFW host is missing a security patch. It, therefore, could be affected by an issue that if successfully exploited, could result in a denial of service condition where the system reloads and/or stops processing/inspecting traffic. C Tenable Network Security, Inc...

VMSA-2013-0009 VMware ESX and ESXi updates to third party libraries

VMware has updated several third party libraries in ESX and ESXi to address multiple security vulnerabilities. OpenVAS Vulnerability Test $Id: gbVMSA-2013-0009.nasl 6074 2017-05-05 09:03:14Z teissa $ VMSA-2013-0009 VMware ESX and ESXi updates to third party libraries Authors: Michael Meyer...