RHEL 6 : java-1.6.0-openjdk (RHSA-2010:0865)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0865 advisory. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. defaultReadObject of the...

RHEL 6 : freetype (RHSA-2010:0864)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0864 advisory. FreeType is a free, high-quality, portable font engine that can open and manage font files. It also loads, hints, and renders individual...

RHEL 6 : poppler (RHSA-2010:0859)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0859 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Two uninitialized pointer use flaws were...

RHEL 6 : firefox (RHSA-2010:0861)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0861 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A race condition flaw was...

RHEL 6 : thunderbird (RHSA-2010:0896)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0896 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. A race condition flaw was found in the way Thunderbird handled Document Objec...

SuSE Update for kernel SUSE-SA:2010:053

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2010:053 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

RedHat Update for kernel RHSA-2010:0839-01

Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2010:0839-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

VMware ESXi and ESX third party updates for Service Console and Likewise components

a. Service Console OS update for COS kernel This patch updates the service console kernel to fix multiple security issues. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2010-0415, CVE-2010-0307, CVE-2010-0291, CVE-2010-0622, CVE-2010-1087, CVE-2010-1437...

Fedora 12 : bugzilla-3.4.9-1.fc12 (2010-17235)

The following security issues have been discovered in Bugzilla : - There is a way to inject both headers and content to users, causing a serious Cross-Site Scripting vulnerability. - It was possible to see graphs from Old Charts even if you did not have access to a particular product, and you cou...

VMSA-2010-0016:VMware ESXi and ESX third party updates for Service Console and Likewise components

VMSA-2010-0016.1 VMware ESXi and ESX third party updates for Service Console and Likewise components VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2010-0016.1 VMware Security Advisory Synopsis: VMware ESXi and ESX third party updates for Service Console and Likewise componen...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 3 Extended Life Cycle Support ELS. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores...

Fedora 12 : proftpd-1.3.3c-1.fc12 (2010-17220)

This is an update to the current upstream maintenance release, which addresses two security issues that can be exploited by malicious users to manipulate certain data and compromise a vulnerable system. - A logic error in the code for processing user input containing the Telnet IAC Interpret As...

Watcher 1.4.1 - latest version download

"Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...

Fedora 12 : seamonkey-2.0.10-1.fc12 (2010-17145)

Update to new upstream SeaMonkey version 2.0.10, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/known-vulnerabilities/se amonkey20.htmlseamonkey2.0.9 - http://www.mozilla.org/security/known-vulnerabilities/ seamonkey20.htmlseamonkey2.0.10...

Exposing SCADA Systems With Shodan

Editor’s Note: The U.S.’s Industrial Control System Computer Emergency Response Team ICS-CERT recently issued a warning to its members about the ability of attackers to discover ICS systems using a simple search on Shodan, a public search engine that is used to locate systems accessible from the...

some ooold Juniper bugs (was: [Full-disclosure] ZDI-10-231: Juniper Secure Access Series meeting_testjava.cgi XSS Vulnerability)

This reminded me of a bunch of problems I spotted in Juniper SSL VPN a while ago; they are apparently fixed, but I don't recall seeing any public vendor advisory / credit for reporting them - so here you go, even if just for the record... These were fixed by Juniper in IVE 6.3R1, 6.2R3, 6.1R5,...

Fedora 12 : sunbird-1.0-0.26.20090916hg.fc12 / thunderbird-3.0.10-1.fc12 (2010-16941)

Update to new upstream Thunderbird version 3.0.10, fixing multiple security issues detailed in the upstream advisory : - http://www.mozilla.org/security/known-vulnerabilities/th underbird30.htmlthunderbird3.0.9 - http://www.mozilla.org/security/known-vulnerabilities/...

RHEL 5 : pam (RHSA-2010:0819)

Updated pam packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Fedora 14 : sunbird-1.0-0.31.b2pre.fc14 / thunderbird-3.1.6-1.fc14 (2010-16926)

Update to new upstream Thunderbird version 3.1.6, fixing multiple security issues detailed in the upstream advisory : - http://www.mozilla.org/security/known-vulnerabilities/th underbird31.htmlthunderbird3.1.5 - http://www.mozilla.org/security/known-vulnerabilities/...

Slackware 12.2 / 13.0 / 13.1 / current : seamonkey (SSA:2010-305-01)

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2010-305-01. The text itself is...