FreeBSD Security Advisory (FreeBSD-SA-10:09.pseudofs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:09.pseudofs.asc SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

django -- cross-site scripting vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[USN-986-1] bzip2 vulnerability

=========================================================== Ubuntu Security Notice USN-986-1 September 20, 2010 bzip2 vulnerability CVE-2010-0405 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS...

AIX 610003 : U835983

The remote host is missing AIX PTF U835983 which is related to the security of the package bos.diag.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

FreeBSD Security Advisory (FreeBSD-SA-10:07.mbuf.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-10:07.mbuf.asc ADV FreeBSD-SA-10:07.mbuf.asc OpenVAS Vulnerability Test $ Description: Auto generated from ADV FreeBSD-SA-10:07.mbuf.asc Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft...

FreeBSD mbuf本地权限提升漏洞

BUGTRAQ ID: 41577 CVE ID: CVE-2010-2693 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 mbuf是FreeBSD内核进程间通讯和联网子系统中的基础内存管理单元。网络报文和套接字缓冲区依赖于mbuf进行存储。 在复制mbuf缓冲区引用时没有正确地拷贝只读标志，如果使用sendfile2系统调用在回环接口上传输数据，就可能导致修改所传送数据的后端内存页，造成数据破坏。本地攻击者可以通过精心控制系统文件的破坏情况来利用这种数据破坏提升权限。请注意攻击者可以破坏任意可读访问的文件。 FreeBSD FreeBSD 8....

sudo: Privilege escalation

Background sudo allows a system administrator to give users the ability to run commands as other users. Description The command matching functionality does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH...

Mandriva Update for python-qt4 MDVA-2010:080 (python-qt4)

Check for the Version of python-qt4 OpenVAS Vulnerability Test Mandriva Update for python-qt4 MDVA-2010:080 python-qt4 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

[USN-869-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-869-1 December 10, 2009 linux vulnerability CVE-2009-1298, CVE-2009-4131 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 This...

[USN-867-1] Ntp vulnerability

=========================================================== Ubuntu Security Notice USN-867-1 December 08, 2009 ntp vulnerability CVE-2009-3563 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu...

Ubuntu USN-856-1 (cupsys)

The remote host is missing an update to cupsys announced via advisory USN-856-1. OpenVAS Vulnerability Test $Id: ubuntu8561.nasl 8616 2018-02-01 08:24:13Z cfischer $ $Id: ubuntu8561.nasl 8616 2018-02-01 08:24:13Z cfischer $ Description: Auto-generated from advisory USN-856-1 cupsys Authors: Thoma...

AIX 530009 : U829408

The remote host is missing AIX PTF U829408 which is related to the security of the package devices.pci.14106902.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

[USN-850-1] poppler vulnerabilities

=========================================================== Ubuntu Security Notice USN-850-1 October 21, 2009 poppler vulnerabilities CVE-2009-0755, CVE-2009-3603, CVE-2009-3604, CVE-2009-3605, CVE-2009-3607, CVE-2009-3608, CVE-2009-3609 ===========================================================...

Ubuntu USN-844-1 (mimetex)

The remote host is missing an update to mimetex announced via advisory USN-844-1. OpenVAS Vulnerability Test $Id: ubuntu8441.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8441.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-844-1 mimetex Authors: Thomas...

FreeBSD-SA-09:14.devfs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-09:14.devfs Security Advisory The FreeBSD Project Topic: Devfs / VFS NULL pointer race condition Category: core Module: kern Announced: 2009-10-02 Credits:...

[USN-837-1] Newt vulnerability

=========================================================== Ubuntu Security Notice USN-837-1 September 24, 2009 newt vulnerability CVE-2009-2905 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubun...

Ubuntu USN-828-1 (pam)

The remote host is missing an update to pam announced via advisory USN-828-1. OpenVAS Vulnerability Test $Id: ubuntu8281.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8281.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-828-1 pam Authors: Thomas Reinke...

Ubuntu USN-813-1 (apr)

The remote host is missing an update to apr announced via advisory USN-813-1. OpenVAS Vulnerability Test $Id: ubuntu8131.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8131.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-813-1 apr Authors: Thomas Reinke...

Ubuntu USN-789-1 (gst-plugins-good0.10)

The remote host is missing an update to gst-plugins-good0.10 announced via advisory USN-789-1. OpenVAS Vulnerability Test $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7891.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-789-1...

FreeBSD直接管道写操作本地信息泄露漏洞

BUGTRAQ ID: 35279 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 FreeBSD和其他UNIX类系统上最常见的进程间通讯方式之一是匿名管道。这种机制会创建一对文件描述符，可以从一个描述符读取写入到另一个描述符的数据。 FreeBSD的管道实现中包含名为“直接写入”的优化。在这种优化中，FreeBSD内核利用虚拟内存映射允许直接在进程之间拷贝数据，而不是在调用...