6282 matches found
Ubuntu 11.04 / 11.10 : libav vulnerabilities (USN-1333-1)
Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the...
MySQL < 4.0.20 File Overwrite
The version of MySQL installed on the remote host is older than 4.0.20. A local attacker could exploit a flaw in mysqlbug to overwite arbitrary files via a symlink attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17823; scriptversion"1.8"; scriptcvsdate"Date:...
op5 Portal Detection
The remote web server hosts op5 Portal, a web interface platform that contains several other components produced by op5, notably op5 Monitor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57575; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...
ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-015 : 0Day HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-12-015 January 12, 2012 - -- CVE ID: CVE-2011-4788 - -- CVSS: 9, AV:N/AC:L/Au:N/C:C/I:P/A:P - -- Affecte...
IrfanView Detection
IrfanView, a graphic viewer, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57559; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"IrfanView Detection";...
Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1332-1)
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Dan Rosenberg reported an error in the old ABI compatibility layer of ARM kernels. A local attacker could...
Ubuntu 11.10 : nova vulnerability (USN-1326-1)
Nachi Ueno, Rohit Karajgi, and Venkatesan Ravikumar discovered that when Nova is configured to use the OpenStack API, it would not correctly enforce access controls on certain incoming requests. A remote authenticated attacker could exploit this to change resources of arbitrary tenants. Note that...
Ubuntu 8.04 LTS : linux vulnerabilities (USN-1323-1)
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel...
Fedora 16 : ruby-1.8.7.357-1.fc16 (2011-17542)
A security flaw was found on the previous ruby that with some series of strings which was specially crafted to intentionally collide their hash values with each other, rails applications may fall into denial of services when such strings are used in HTTP requests CVE-2011-4815. This new ruby will...
Cisco IOS Locally Defined User Enumeration
It is possible to enumerate all locally defined users, which are used for authentication, on a Cisco IOS device if aaa new-model is not used. TRUSTED...
Ubuntu 11.04 / 11.10 : mozvoikko, ubufox update (USN-1306-2)
USN-1306-1 fixed vulnerabilities in Firefox. This update provides updated Mozvoikko and ubufox packages for use with Firefox 9. Alexandre Poirot, Chris Blizzard, Kyle Huey, Scoobidiver, Christian Holler, David Baron, Gary Kwong, Jim Blandy, Bob Clary, Jesse Ruderman, Marcia Knous, and Rober Longs...
OpenSSL < 0.9.6b Predictable Random Generator
According to its banner, the remote web server is running a version of OpenSSL that is earlier than 0.9.6b and allows remote attackers to predict the output of the pseudo-random generator. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17745; scriptversion"1.11";...
Fedora 16 : phpMyAdmin-3.4.9-1.fc16 (2011-17369)
Changes 3.4.9.0 2011-12-21 : - edit Inline editing enum fields with null shows no dropdown - interface DB suggestion not correct for user with underscore - core Magic quotes removed in PHP 5.4 - session No feedback when result is empty signon authtype - display Problems regarding ShowTooltipAlias...
Fedora 16 : glibc-2.14.90-24.fc16.4 (2011-17386)
Reverts 552960 patch which is causing a variety of problems. - Sun Dec 18 2011 Jeff Law - 2.14.90-24.fc16.3 - Check values from TZ file header 767696 - Handle EAGAIN from FUTEXWAITREQUEUEPI 552960 - Add dist. - Correct return value from pthreadcreate when stack allocation fails. 767746 - Wed Dec ...
PuTTY Detection
The remote host has an installation of PuTTY, which is a suite of tools for remote console access and file transfer. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57364; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/12/30";...
Ubuntu 10.04 LTS / 10.10 / 11.04 : python3.1, python3.2 vulnerabilities (USN-1314-1)
Giampaolo Rodola discovered that the smtpd module in Python 3 did not properly handle certain error conditions. A remote attacker could exploit this to cause a denial of service via daemon outage. This issue only affected Ubuntu 10.04 LTS. CVE-2010-3493 Niels Heinen discovered that the urllib...
Fedora 16 : phpMyAdmin-3.4.8-1.fc16 (2011-16768)
Changes for 3.4.8.0 2011-12-01 : - interface enum data split at space char more space to edit - interface ENUM/SET editor can't handle commas in values - interface no links to browse/empty views and tables - interface Deleted search results remain visible - import ODS import ignores memory limits...
Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : bzip2 vulnerability (USN-1308-1)
vladz discovered that executables compressed by bzexe insecurely create temporary files when they are ran. A local attacker could exploit this issue to execute arbitrary code as the user running a compressed executable. Note that Tenable Network Security has extracted the preceding description...
Fedora 14 : openswan-2.6.33-3.fc14 (2011-15127)
Fixes for CVE-2011-4073. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...
Fedora 15 : pam-1.1.5-1.fc15 (2011-16365)
Low impact security update from upstream. Only minor and safe changes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...