Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : devscripts vulnerabilities (USN-1593-1)

Raphael Geissert discovered that the debdiff.pl tool incorrectly handled shell metacharacters. If a user or automated system were tricked into processing a specially crafted filename, a remote attacker could possibly execute arbitrary code. CVE-2012-0212 Raphael Geissert discovered that the...

Novell GroupWise WebAccess Detection

Novell GroupWise WebAccess, a component of the GroupWise suite that provides web-based remote access, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62415; scriptversion"1.7";...

Ubuntu 11.10 / 12.04 LTS : emacs23 vulnerabilities (USN-1586-1)

Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. CVE-2012-0035 Paul Ling discovered that Emacs incorrectly handled...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : libxml2 vulnerability (USN-1587-1)

Juri Aedla discovered that libxml2 incorrectly handled certain memory operations. If a user or application linked against libxml2 were tricked into opening a specially crafted XML file, an attacker could cause the application to crash or possibly execute arbitrary code with the privileges of the...

Fedora 17 : libxslt-1.1.26-10.fc17 (2012-14083)

Lot of security fixes and a few other bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

Fedora 17 : spice-gtk-0.12-5.fc17 (2012-14107)

Fix for CVE-2012-4425 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Ubuntu 12.04 LTS : transmission vulnerability (USN-1584-1)

Justin C. Klein Keane discovered that the Transmission web client incorrectly escaped certain strings. If a user were tricked into opening a specially crafted torrent file, an attacker could possibly exploit this to conduct cross-site scripting XSS attacks. Note that Tenable Network Security has...

Fedora 17 : cloud-init-0.6.3-0.5.bzr532.fc17 (2012-14121)

This update changes the URL that cloud-init uses as a fallback for instance metadata when http://169.254.169.254/ is not reachable from http://instance-data:8773/ to http://instance-data.:8773/ . It also fixes two systemd-related bugs. Note that the former will require DNS server reconfiguration ...

Fedora 16 : cloud-init-0.6.3-0.5.bzr532.fc16 (2012-14189)

This update changes the URL that cloud-init uses as a fallback for instance metadata when http://169.254.169.254/ is not reachable from http://instance-data:8773/ to http://instance-data.:8773/ . It also fixes two systemd-related bugs. Note that the former will require DNS server reconfiguration ...

Ubuntu 8.04 LTS / 10.04 LTS : ghostscript vulnerability (USN-1581-1)

Marc Schonefeld discovered that Ghostscript did not correctly handle certain image files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service and possibly execute arbitrary code with user privileges. Note that Tenable Netwo...

Fedora Core 3 : kdelibs-3.3.1-2.12.FC3 (2005-350)

A buffer overflow was found in the kimgio library for KDE 3.3.1. An attacker could create a carefully crafted PCX image in such a way that it would cause kimgio to execute arbitrary code when processing the image. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the nam...

Fedora 16 : icedtea-web-1.3-2.fc16 (2012-14340)

This update brings IcedTea-Web 1.3 to Fedora. From Red Hat Bugzilla, it fixes rhbz720836. Additionally, it provides numerous other bug fixes and enhancements, many of which are listed here : https://dbhole.wordpress.com/2012/09/05/icedtea-web-1-3-released/ Note that Tenable Network Security has...

Fedora Core 3 : mailman-2.1.5-30.fc3 (2005-132)

There is a critical security flaw in Mailman 2.1.5 which will allow attackers to read arbitrary files. The extent of the vulnerability depends on what version of Apache httpd you are running, and possibly how you have configured your web server. It is believed the vulnerability is not available...

Fedora Core 2 : mailman-2.1.5-8.fc2 (2005-131)

There is a critical security flaw in Mailman 2.1.5 which will allow attackers to read arbitrary files. The extent of the vulnerability depends on what version of Apache httpd you are running, and possibly how you have configured your web server. It is believed the vulnerability is not available...

Fedora Extras : mediawiki-1.8.3-7 (2007-005)

An XSS injection vulnerability was located in the AJAX support module, affecting MediaWiki 1.6.x and up when the optional setting $wgUseAjax is enabled. There is no danger in the default configuration, with $wgUseAjax off. - Tue Jan 9 2007 Axel Thimm - 1.8.3-7 - Update to 1.8.3. - Update fixes an...

Fedora Extras 5 : dia-0.95-3

This update fixes CVE-2006-1550, CVE-2006-2453, CVE-2006-2480 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Core 3 : krb5-1.3.6-5 (2005-270)

Updated krb5 packages which fix two buffer overflow vulnerabilities in the included Kerberos-aware telnet client are now available. Kerberos is a networked authentication system which uses a trusted third-party a KDC to authenticate clients and servers to each other. The krb5-workstation package...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : dbus vulnerability (USN-1576-1)

Sebastian Krahmer discovered that DBus incorrectly handled environment variables when running with elevated privileges. A local attacker could possibly exploit this flaw with a setuid binary and gain root privileges. Note that Tenable Network Security has extracted the preceding description block...

Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1574-1)

A flaw was found in how the Linux kernel passed the replacement session keyring to a child process. An unprivileged local user could exploit this flaw to cause a denial of service panic. CVE-2012-2745 Ben Hutchings reported a flaw in the Linux kernel with some network drivers that support TSO TCP...

Ubuntu 10.04 LTS : linux vulnerabilities (USN-1572-1)

Ben Hutchings reported a flaw in the Linux kernel with some network drivers that support TSO TCP segment offload. A local or peer user could exploit this flaw to to cause a denial of service. CVE-2012-3412 Jay Fenlason and Doug Ledford discovered a bug in the Linux kernel implementation of RDS...