rhn_satellite: Improper channel comps information management

Red Hat Network RHN Satellite 5.3 and 5.4 exposes a dangerous, obsolete XML-RPC API, which allows remote authenticated users to access arbitrary files and cause a denial of service failed yum operations via vectors related to configuration and package group comps.xml files for channels...

Debian Security Advisory DSA 2179-1 (dtc)

The remote host is missing an update to dtc announced via advisory DSA 2179-1. OpenVAS Vulnerability Test $Id: deb21791.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2179-1 dtc Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

dtc -- multiple vulnerabilities

Ansgar Burchardt reports: Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting hosting services: The bwpermoth.php graph contains an SQL injection vulnerability; insufficient checks in bwpermonth.php can lead to bandwidth usage information...

IT-Grundschutz M4.305: Einsatz von Speicherbeschränkungen (Quotas)

IT-Grundschutz M4.305: Einsatz von Speicherbeschränkungen Quotas. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.94230 Diese Prüfung bezieht sich auf die 10...

[SECURITY] Fedora 11 Update: freetype1-1.4-0.8.pre.fc11

The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is no ...

[SECURITY] Fedora 10 Update: freetype1-1.4-0.8.pre.fc10

The FreeType engine is a free and portable TrueType font rendering engine, developed to provide TrueType support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is no ...

Solaris 5.4 (sparc) : 108636-02

CDE 1.0.1/1.0.2: ToolTalk patch. Date this patch was last updated by Sun : Jan/04/02 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.4 (sparc) : 103235-12

Solstice AdminSuite 2.1: AdminSuite patch. Date this patch was last updated by Sun : Aug/20/97 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 9 (sparc) : 127381-01

Sun Management Centre 3.6: Patch for Solaris 9. Date this patch was last updated by Sun : Dec/11/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Mandriva Update for dkms MDKA-2007:054 (dkms)

Check for the Version of dkms OpenVAS Vulnerability Test Mandriva Update for dkms MDKA-2007:054 dkms Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Mandriva Update for silc-toolkit MDVA-2008:051 (silc-toolkit)

Check for the Version of silc-toolkit OpenVAS Vulnerability Test Mandriva Update for silc-toolkit MDVA-2008:051 silc-toolkit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for silc-toolkit MDVA-2008:051 (silc-toolkit)

Check for the Version of silc-toolkit OpenVAS Vulnerability Test Mandriva Update for silc-toolkit MDVA-2008:051 silc-toolkit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Solaris 9 (x86) : 138574-01

SunOS 5.9x86: usr/sbin/rpc.metad patch. Date this patch was last updated by Sun : Jan/07/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Security fix for the ALT Linux 5 package fetchmail version 6.3.9-alt1

Dec. 1, 2008 Afanasov Dmitry 6.3.9-alt1 - 6.3.9 + CVE-2007-4565: Denial of service + CVE-2008-2711: Denial of service + close memory leak when SSL connection fails and other - remove obsolete updatemenus/cleanmenus macroses...

Unsupported Web Server Detection

According to its version, the remote web server is obsolete and no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. C Tenable Network Security, In...

Unmaintained Gentoo packages

The remote Gentoo system contains several packages or versions which have been marked as obsolete and have been removed from the portage tree. These versions are therefore unmaintained, which means that if any security flaw is found in them, no patch will be made available. In addition to this,...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : php5 vulnerabilities (USN-628-1)

It was discovered that PHP did not properly check the length of the string parameter to the fnmatch function. An attacker could cause a denial of service in the PHP interpreter if a script passed untrusted input to the fnmatch function. CVE-2007-4782 Maksymilian Arciemowicz discovered a flaw in t...

CVE-2008-2829

phpimap.c in PHP 5.2.5, 5.2.6, 4.x, and other versions, uses obsolete API calls that allow context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a long IMAP request, which triggers an "rfc822.c legacy routine buffer overflow" error message, related...

Fedora Core 4 : samba-3.0.23-1.fc4 (2006-808)

Wed Jul 12 2006 Jay Fenlason 3.0.23-1.fc4 - Update to 3.0.23 to close bz197836 CVE-2006-3403 Samba denial of service - include related spec file, filter-requires-samba.sh and patch changes from rawhide. -winbind, and -access patches are obsolete. - include the fixed smb.init file from rawhide,...

Unmaintainted Gentoo Packages

The remote Gentoo system contains several packages or versions which have been marked as obsolete and have been removed from the portage tree. These versions are therefore unmaintained, which means that if any security flaw is found in them, no patch will be made available. In addition to this,...