Linux Kernel 'CAP_NET_ADMIN'未授权访问漏洞

Bugtraq ID: 47792 CVE ID：CVE-2011-1019 Linux是一款开放源代码的操作系统。 devload存在一个缺陷允许有CAPNETADMIN capability的本地用户从"/lib/modules/"装载任意模块，而本来只限装载与网络相关的模块如netdev。 Linux kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： https://bugzilla.redhat.com/showbug.cgi?id=680360...

ISC BIND 9 RRSIG Query类型远程拒绝服务漏洞

BUGTRAQ ID: 47734 CVE ID: CVE-2011-1907 BIND是一个应用非常广泛的DNS协议的实现，由ISC负责维护，具体的开发由Nominum公司完成。 ISC BIND在实现上存在远程拒绝服务漏洞，由于未能正确处理某些记录类型，攻击者可利用此漏洞造成应用程序进程崩溃，拒绝服务合法用户。 此问题仅影响将配置的RPZ功能用于RRset替换的BIND用户。BIND...

RHEL 4 : python (RHSA-2011:0491)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0491 advisory. Python is an interpreted, interactive, object-oriented programming language. A flaw was found in the Python urllib and urllib2 libraries whe...

RedHat Update for nss RHSA-2011:0472-01

Check for the Version of nss OpenVAS Vulnerability Test RedHat Update for nss RHSA-2011:0472-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

RedHat Update for seamonkey RHSA-2011:0473-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2011:0473-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for nss RHSA-2011:0472-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1169

Array index error in the asihpihpiioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service memory corruption or possibly gain privileges via a crafted adapter index value that triggers acce...

RHEL 4 : gstreamer-plugins (RHSA-2011:0477)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0477 advisory. - libmodplug: Integer overflow when reading samples of AMF files CVE-2006-4192 - libmodplug: ReadS3M stack overflow vulnerability...

CVE-2011-1589

Directory traversal vulnerability in Path.pm in Mojolicious before 1.16 allows remote attackers to read arbitrary files via a %2f..%2f encoded slash dot dot slash in a URI...

seamonkey security update

1.0.9-70.0.1.el48 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-70.el4 - Added fixes for mozbz645565 and mozbz646460 1.0.9-69.el4 - Added fixes from 1.9.1.19...

RHEL 4 : seamonkey (RHSA-2011:0473)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0473 advisory. - Mozilla use after free flaw MFSA 2011-12 CVE-2011-0072 - Mozilla dangling pointer flaw MFSA 2011-13 CVE-2011-0073 - Mozilla crash from...

RHEL 6 : kdenetwork (RHSA-2011:0465)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0465 advisory. - kdenetwork: incomplete fix for CVE-2010-1000 CVE-2011-1586 Note that Nessus has not tested for this issue but has instead relied only on the...

RHEL 6 : libtiff (RHSA-2011:0452)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0452 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. A heap-based buffer overflow flaw was found...

RedHat Update for xorg-x11 RHSA-2011:0432-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for kernel RHSA-2011:0429-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for avahi RHSA-2011:0436-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

compat, openldap security update

CentOS Errata and Security Advisory CESA-2011:0346 Updated openldap packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System...

RHEL 5 : kernel (RHSA-2011:0429)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0429 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: A...

RHEL 4 : xorg-x11 (RHSA-2011:0432)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0432 advisory. X.Org is an open source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user...

Fedora 14 : quagga-0.99.18-1.fc14 (2011-3922)

Wed Mar 23 2011 Jiri Skala - 0.99.18-1 - fixes 689852 - CVE-2010-1674 CVE-2010-1675 quagga various flaws - fixes 689763 - updated to latest upstream version 0.99.18 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...