Huawei eSap Platform DoS (HWPSIRT-2014-0111)

The remote host is a Huawei device running a firmware version that is affected by a denial of service vulnerability. The issue stems from a heap overflow vulnerability in the firmware. A remote, unauthenticated attacker could exploit this vulnerability by sending malformed packets to cause...

openSUSE Security Update : nagios (openSUSE-SU-2013:1158-1)

This nagios update fixes a authorization problem inside host/service views. - added nagios-CVE-2013-2214.patch fixing unauthorized host/service views displayed in servicegroup view bnc827020 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

openSUSE Security Update : acroread (openSUSE-2012-33)

Acrobat Reader was updated to version 9.4.7 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-33. The text description of this plugin is C SUSE LLC...

Cisco WLC Web-Based Management Interface XSS Vulnerability (CSCuf77810)

A vulnerability in the web-based management interface of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input...

Solaris 10 (x86) : 150401-06

SunOS 5.10x86: Kernel Patch. Date this patch was last updated by Sun : Dec/13/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is has been withdrawn. Disabled on 2014/02/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Fedora 20 : kernel-3.12.8-300.fc20 (2014-1062)

The 3.12.8 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Serv-U FTP Server < 15.0.0.0 Multiple Security Vulnerabilities

According to its banner, the installed version of Serv-U is a version prior to version 15.0.0.0. It is, therefore, potentially affected by multiple vulnerabilities : - An unspecified error exists related to SSL that can be exploited to cause a denial of service. - An unspecified error exists when...

Solaris 10 (sparc) : 142785-17 (deprecated)

Oracle Communications Calendar Server 7u5-17.22: core patch. Date this patch was last updated by Sun : Feb/21/15 This plugin has been deprecated and either replaced with individual 142785 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Fedora 17 : haproxy-1.4.24-1.fc17 (2013-11234)

Update to upstream stable release 1.4.24. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

Fedora 18 : kernel-3.8.6-203.fc18 (2013-5368)

Update to latest stable upstream release, Linux v3.8.6. Wide variety of fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possibl...

Solaris 10 (sparc) : 150117-01

SunOS 5.10: mac patch. Date this patch was last updated by Sun : Mar/22/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/07/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 10 (x86) : 150118-01

SunOS 5.10x86: mac patch. Date this patch was last updated by Sun : Mar/22/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/09/23. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

SuSE 11.1 Security Update : libexif (SAT Patch Number 6568)

Various overflows and other security related bugs in libexif were found by the Google Security team and fixed by the libexif developers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

RHEL 5 : httpd (RHSA-2011:1294)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1294 advisory. - httpd: multiple ranges DoS CVE-2011-3192 Note that Nessus has not tested for this issue but has instead relied only on the application's...

Fedora 17 : libssh-0.5.3-1.fc17 (2012-18677)

This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 16 : rubygem-activesupport-3.0.10-4.fc16 (2012-11880)

Fixes for CVE-2012-3464. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Solaris 10 (sparc) : 149191-01 (deprecated)

SunOS 5.10: mountd patch. Date this patch was last updated by Sun : Jun/08/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/11/29. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Fedora 16 : rubygem-actionmailer-3.0.10-2.fc16 / rubygem-mail-2.4.4-1.fc16 (2012-7535)

Update to Mail 2.4.4. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 17 : openconnect-3.18-1.fc17 (2012-6689)

This update fixes a potential buffer overrun when handling the greeting banner from the server. This update fixes a potential crash when processing libproxy results, and introduces some performance improvements. Note that Tenable Network Security has extracted the preceding description block...

SuSE 11.1 Security Update : popt (SAT Patch Number 5256)

Specially crafted RPM packages could have caused memory corruption in rpm when verifying signatures CVE-2011-3378. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...