OracleVM 2.1 : xen (OVMSA-2008-2007)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2008-1945: add image format options for USB storage and removable media - CVE-2008-1952: included in fix for CVE-2008-1943 3.1.4-0.1.3.el5 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

OracleVM 3.1 : xen (OVMSA-2014-0010)

The remote OracleVM system is missing necessary patches to address critical security updates : - page-alloc: scrub pages used by hypervisor upon freeing ... unless they're part of a fully separate pool and hence can't ever be used for guest allocations. This is XSA-100. %NASLMINLEVEL 70300 C...

OracleVM 3.3 : xen (OVMSA-2014-0038) (POODLE)

The remote OracleVM system is missing necessary patches to address critical security updates : - xend: disable sslv3 due to CVE-2014-3566 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2014-0038...

OracleVM 2.2 : xen (OVMSA-2012-0022)

The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2012-0217 CVE-2012-0218: guest DoS on syscall/sysenter exception generation orabug 13993157 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted fr...

OracleVM 3.1 : xen (OVMSA-2012-0051)

The remote OracleVM system is missing necessary patches to address critical security updates : - libxc: builder: limit maximum size of kernel/ramdisk. Allowing user supplied kernels of arbitrary sizes, especially during decompression, can swallow up dom0 memory leading to either virtual address...

OracleVM 3.1 : xen (OVMSA-2013-0087)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/HVM: only allow ring 0 guest code to make hypercalls Anything else would allow for privilege escalation. This is CVE-2013-4554 / XSA-76. CVE-2013-4554 - x86: restrict XENDOMCTLgetmemlist Coverity ...

Oracle Solaris Critical Patch Update : july2013_SRU6_6

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Libraries/Libc. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability...

Oracle Solaris Critical Patch Update : apr2012_SRU3

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Kernel/sockfs . Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability requiring logon to...

Oracle Solaris Critical Patch Update : apr2013_SRU0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Remote Execution Service. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability...

VMSA-2014-0003 VMware vSphere Client updates address security vulnerabilities

VMware vSphere Client updates address security vulnerabilities OpenVAS Vulnerability Test $Id: gbVMSA-2014-0003.nasl 6663 2017-07-11 09:58:05Z teissa $ VMSA-2014-0003: VMware vSphere Client updates address security vulnerabilities Authors: Michael Meyer Copyright: Copyright c 2014 Greenbone...

VMSA-2014-0001 VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues

VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues. OpenVAS Vulnerability Test $Id: gbVMSA-2014-0001.nasl 6750 2017-07-18 09:56:47Z teissa $ VMSA-2014-0001: VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security...

VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX

VMware ESXi and ESX unauthorized file access through vCenter Server and ESX OpenVAS Vulnerability Test $Id: gbVMSA-2013-0016.nasl 6086 2017-05-09 09:03:30Z teissa $ VMSA-2013-0016 VMware ESXi and ESX unauthorized file access through vCenter Server and ESX Authors: Michael Meyer Copyright: Copyrig...

VMSA-2013-0001 VMware vSphere security updates for the authentication service and third party libraries

The remote ESXi is missing one or more security related Updates from VMSA-2013-0001. Summary VMware vSphere security updates for for the authentication service and third party libraries Relevant releases vCenter Server 4.1 without Update 3a vSphere Client 4.1 without Update 3a ESXi 4.1 without...

VMware ESXi/ESX security updates (VMSA-2012-0016)

The remote ESXi is missing one or more security related Updates from VMSA-2012-0016. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[SECURITY] [DSA 2519-2] isc-dhcp regression

------------------------------------------------------------------------- Debian Security Advisory DSA-2519-2 [email protected] http://www.debian.org/security/ Nico Golde August 4, 2012 http://www.debian.org/security/faq -...

VMSA-2012-0011 VMware Workstation, Player, Fusion, ESXi and ESX patches address security issues.

The remote ESXi is missing one or more security related Updates from VMSA-2012-0011. Summary VMware Workstation, Player, Fusion, ESXi and ESX patches address security issues. Relevant releases: Workstation 8.0.3 Workstation 7.1.5 Player 4.0.3 Player 3.1.5 Fusion 4.1.2 ESXi 5.0 without patch...

GLSA-201201-05 : mDNSResponder: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201201-05 mDNSResponder: Multiple vulnerabilities Multiple vulnerabilities have been discovered in mDNSResponder. Please review the CVE identifiers referenced below for details. Impact : A local or remote attacker may be able to...

Lax Security to Blame for NASDAQ Hack

The cyber attack on the NASDAQ OMX Group late last year was the result of shoddy security, according to a new report via Reuters. Computers running NASDAQ’s Director’s Desk, the software that was breached, had faulty firewalls, missing security patches and were running outdated software, like...

MDVA-2010:202 : mdkonline

This update: - fixes bug related to loading png files after upgrading GTK 59025 in distro upgrade; - Adds the mdkapplet restart feature to mdkapplet-upgrade-helper, triggered after a successful upgrade 59481. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch...

MDVA-2010:198 : beagle

It was discovered the mozilla-thunderbird-beagle packages wasn't built against the latest mozilla-thunderbird 3.0.8. The fixed packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...