Microsoft Outlook Remote Code Execution Vulnerability (2756473)

This host is missing a critical security update according to Microsoft Bulletin MS13-068. OpenVAS Vulnerability Test $Id: secpodms13-068.nasl 6079 2017-05-08 09:03:33Z teissa $ Microsoft Outlook Remote Code Execution Vulnerability 2756473 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPod,...

MS13-068: Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2756473)

The Outlook component of Microsoft Office is affected by a remote code execution vulnerability due to a flaw in how Outlook parses S/MIME messages. It is possible for a remote attacker to execute arbitrary code if a user opens or previews a specially crafted email in an affected version of Outloo...

SharePoint Fixes Priority for September 2013 Patch Tuesday

It’s no secret that putting SharePoint installations online and making them accessible without authentication is standard practice in many organizations. Those SharePoint administrators, however, may want to rethink their policies after today’s Microsoft Patch Tuesday security bulletins release...

Siemens SINAMICS S/G Authentication Bypass Vulnerability

OVERVIEW Siemens has identified an authentication bypass vulnerability in the SINAMICS S/G product family. Siemens has produced a firmware update that mitigates this vulnerability and has tested the update to validate that it resolves the vulnerability. Exploitation of this vulnerability could...

Amazon Linux AMI : openssl (ALAS-2012-62)

A NULL pointer dereference flaw was found in the way OpenSSL parsed Secure/Multipurpose Internet Mail Extensions S/MIME messages. An attacker could use this flaw to crash an application that uses OpenSSL to decrypt or verify S/MIME messages. CVE-2012-1165 A flaw was found in the PKCS7 and...

Fedora Update for nodejs-callsite FEDORA-2013-11780

Check for the Version of nodejs-callsite OpenVAS Vulnerability Test Fedora Update for nodejs-callsite FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Oracle Linux 4 : evolution / evolution-data-server (ELSA-2009-0355)

From Red Hat Security Advisory 2009:0355 : Updated evolution and evolution-data-server packages that fixes multiple security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Evolution is t...

Oracle Linux 4 : kernel (ELSA-2007-1104)

From Red Hat Security Advisory 2007:1104 : Updated kernel packages that fix various security issues and several bugs in the Red Hat Enterprise Linux 4 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel package...

Oracle Linux 5 : evolution-data-server (ELSA-2009-0354)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-0354 advisory. - Add patch for RH bug 488280 CVE-2009-0547, S/MIME signatures. - Add patch for RH bug 488280 CVE-2009-0582, NTLM authentication. Tenable has extracted...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2011-2010)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-2010 advisory. - block check for proper length of iov entries earlier in blkrqmapuseriov Xiaotian Feng CVE-2010-4668 - scm: lower SCMMAXFD Eric Dumazet...

CentOS 5 : nss (CESA-2013:0214)

Updated nss and nspr packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Network Security Services NSS is a set of libraries designe...

Microsoft Outlook 'S/MIME EmailAddress'属性错配安全漏洞

BUGTRAQ ID: 60591 Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook所有版本存在S/MIME不完整的问题，对于X509 EmailAddress属性不匹配邮件的“From”地址的数字签名MIME邮件，Outlook并不发出警告。攻击者可利用此漏洞执行钓鱼攻击。 0 Microsoft Outlook 厂商补丁： Microsoft --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2012-6569

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

CentOS Update for kernel CESA-2013:0911 centos6

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2013:0911 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

CentOS Update for kernel CESA-2013:0911 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for curl FEDORA-2013-7797

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"cur...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 8527)

This Linux kernel update fixes various security issues and bugs in the SUSE Linux Enterprise 10 SP4 kernel. The following security issues have been fixed : - A race condition in ptrace2 could be used by local attackers to crash the kernel and/or execute code in kernel context. CVE-2013-0871 - Avo...

[HoneyProxy] A man-in-the-middle SSL Proxy & Traffic Analyzer

HoneyProxy is a lightweight tool that allows live HTTPS traffic inspection and analysis. It focuses on features that are useful for malware analysis and network forensics. Features Analyze HTTPS traffic on the fly Filter and highlight traffic, regex support included. Report Generation for saved...

[SECURITY] Fedora 17 Update: nss-3.14.3-1.fc17

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

Ubuntu 4.10 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-219-1)

Al Viro discovered a race condition in the /proc file handler of network devices. A local attacker could exploit this by opening any file in /proc/sys/net/ipv4/conf// and waiting until that interface was shut down. Under certain circumstances this could lead to a kernel crash or even arbitrary co...