DjVu Browser Plug-in < 6.1.1 Multiple Buffer Overflows

The DjVu Browser Plug-in is installed on the remote Windows host. This plugin provides the primary means of viewing DjVu documents, which are used for publishing scanned books, catalogs, historical documents, research papers, manuals, etc. The version of the DjVu Browser Plug-in installed on the...

SUSE-SA:2006:042: kernel

The remote host is missing the patch for the advisory SUSE-SA:2006:042 kernel. The Linux kernel has been updated to fix several security issues. This advisory refers to kernel updates for SUSE Linux 9.1 - 10.1. The SUSE Linux 9.1 kernel update is the final SUSE Linux 9.1 YOU update see separate...

SUSE-SA:2007:006: mozilla

The remote host is missing the patch for the advisory SUSE-SA:2007:006 mozilla. A number of security issues have been fixed in the Mozilla browser suite, which could be used by remote attackers to gain privileges, access to confidential information or cause denial of service attacks. Since the...

SUSE-SA:2006:043: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:043 apache,apache2. The following security problem was fixed in the Apache and Apache 2 web servers: modrewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer...

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2006:205)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 1.5.0.8. This update provides the latest Firefox to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SUSE-SA:2006:038: opera

The remote host is missing the patch for the advisory SUSE-SA:2006:038 opera. The web browser Opera has been upgraded to version 9.0 to add lots of new features, and to fix the following security problem: - CVE-2006-3198: An integer overflow vulnerability exists in the Opera Web Browser due to th...

SUSE-SA:2006:072: openldap2-client

The remote host is missing the patch for the advisory SUSE-SA:2006:072 openldap2-client. OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Serv...

SUSE-SA:2006:056: gzip

The remote host is missing the patch for the advisory SUSE-SA:2006:056 gzip. The gzip tool does not handle some specific values correctly when unpacking archives. This leads to vulnerabilities like buffer overflows or infinite loops. Various different programs like mail clients, file explorer, et...

Windows Live OneCare Antivirus Detection

Windows Live OneCare antivirus, a commercial antivirus software package for Windows, is installed on the remote host; however, there is a problem with the install in that either its services are not running, or its engine and/or virus definition are out of date. %NASLMINLEVEL 999999 C Tenable...

MS07-016: Cumulative Security Update for Internet Explorer (928090)

The remote host is missing the IE cumulative security update 92808. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid24340;...

HP LoadRunner Agent Service Detection

An HP LoadRunner Agent is listening on the remote host. This agent enables a LoadRunner Controller to communicate with the LoadRunner Load Generator on the remote host for performance testing. Note that Hewlett-Packard acquired LoadRunner in November 2006 as part of its acquisition of Mercury...

Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass

The remote host is running Advanced Poll, a simple polling application written in PHP. The version of Advanced Poll installed on the remote host includes code to emulate PHP's 'registerglobals' functionality when that setting is disabled, which is true by default with recent versions of PHP. In...

Mac OS X Security Update 2007-001

The remote host is running a version of Mac OS X 10.3 or 10.4 which does not have Security Update 2007-001 applied. This update fixes a flaw in QuickTime which may allow a rogue website to execute arbitrary code on the remote host by exploiting an overflow in the RTSP URL handler. TRUSTED...

Fedora Core 4 : kernel-2.6.17-1.2141_FC4 (2006-769)

An update to the latest upstream stable release 2.6.17.3, which fixes a security issue with SCTP. Further details: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.2 Note that Tenable Network Security has extracted the...

CA BrightStor ARCserve Backup Tape Engine Multiple Remote Overflows (QO84983)

This host is running BrightStor ARCServe for Windows. The remote version of this software has multiple buffer overflow vulnerabilities in the Tape Engine MSRPC service. An attacker, by sending a specially crafted packet, may be able to crash the affected service or execute code on the remote host...

phpMyFAQ < 1.6.8 Multiple Vulnerabilities

Binary data 3880.prm...

OmniWeb Browser < 5.5.2 Javascript alert Function Format String

Binary data 3879.prm...

Cacti copy_cacti_user.php template_user Variable SQL Injection

The remote host is running Cacti, a web-based, front end to RRDTool for network graphing. The version of Cacti on the remote host does not properly check whether the 'copycactiuser.php' script is being run from a commandline and fails to sanitize user-supplied input before using it in database...

Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow

The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...

MS06-072: Cumulative Security Update for Internet Explorer (925454)

The remote host is missing the IE cumulative security update 925454. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Note that Microsoft has re-released this hotfix as its initial version contained a buffer overflo...