Symantec Backup Exec Server / System Recovery Installed

Symantec System Recovery, formerly Backup Exec Server, a data backup and recovery application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55115; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate",...

Ubuntu 10.04 LTS / 10.10 : tiff vulnerability (USN-1120-1)

It was discovered that the TIFF library incorrectly handled certain JPEG data. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a denial of service. Not...

Ubuntu 10.10 : language-selector vulnerability (USN-1115-1)

Romain Perier discovered that the language-selector D-Bus backend did not correctly check for Policy Kit authorizations. A local attacker could exploit this to inject shell commands into the system-wide locale configuration file, leading to root privilege escalation. Note that Tenable Network...

Ubuntu 10.04 LTS / 10.10 / 11.04 : rdesktop vulnerability (USN-1136-1)

It was discovered that rdesktop incorrectly handled specially crafted paths when using disk redirection. If a user were tricked into connecting to a malicious server, an attacker could access arbitrary files on the user's filesystem. Note that Tenable Network Security has extracted the preceding...

Ubuntu 9.10 / 10.04 LTS / 10.10 : dhcp3 vulnerability (USN-1108-2)

USN-1108-1 fixed vulnerabilities in DHCP. Due to an error, the patch to fix the vulnerability was not properly applied on Ubuntu 9.10 and higher. This update fixes the problem. Sebastian Krahmer discovered that the dhclient utility incorrectly filtered crafted responses. An attacker could use thi...

Ubuntu 9.10 / 10.04 LTS / 10.10 : kde4libs vulnerabilities (USN-1110-1)

It was discovered that KDE KSSL did not properly verify X.509 certificates when the certificate was issued for an IP address. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. CVE-2011-1094 Tim Brown discovered th...

Fedora 15 : sudo-1.7.4p5-4.fc15 (2011-7867)

build with RELPRO Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 14 : kernel-2.6.35.13-92.fc14 (2011-7551)

Some small but critical bug fixes and one security fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 13 : cyrus-imapd-2.3.16-5.fc13 (2011-7193)

Wed May 18 2011 Michal Hlavinka - 2.3.16-5 - fix CVE-2011-1926: STARTTLS plaintext command injection vulnerability - Fri Jan 21 2011 Michal Hlavinka - 2.3.16-4 - don't force sync io for all filesystems - Tue Apr 20 2010 Michal Hlavinka - 2.3.16-3 - add support for QoS marked traffic 576652 Note...

Fedora 13 : rdesktop-1.6.0-10.fc13 (2011-7694)

This update fixes a security issue in rdesktop 1.6.0. A directory traversal flaw was found in the way rdesktop shared a local path with a remote server. If a user connects to a malicious server with rdesktop, the server could use this flaw to cause rdesktop to read and write to arbitrary, local...

Fedora 14 : mumble-1.2.3-2.fc14 (2011-7194)

Update to 1.2.3 addressing a security issue and fixing the codec issue Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 14 : tor-0.2.1.30-1400.fc14 (2011-7972)

Thu Mar 17 2011 Enrico Scholz - 0.2.1.30-1400 - updated to 0.2.1.30 - Mon Jan 17 2011 Enrico Scholz - 0.2.1.29-1400 - updated to 0.2.1.29 SECURITY - CVE-2011-0427: heap overflow bug, potential remote code execution - Tue Dec 21 2010 Luke Macken - 0.2.1.28-1400 - updated to 0.2.1.28 SECURITY:...

Fedora 15 : rdesktop-1.6.0-12.fc15 (2011-7688)

This update fixes a security issue in rdesktop 1.6.0. A directory traversal flaw was found in the way rdesktop shared a local path with a remote server. If a user connects to a malicious server with rdesktop, the server could use this flaw to cause rdesktop to read and write to arbitrary, local...

Fedora 13 : apr-1.4.5-1.fc13 (2011-7340)

Move to 1.4.x branch. Various bug fixes since 1.4.2. Security: CVE-2011-0419 Reimplement aprfnmatch from scratch using a non-recursive algorithm; now has improved compliance with the fnmatch spec. Note: 1.4.3 was never officially released. Fix CVE-2011-1928 introduced in 1.4.4. Note that Tenable...

Wing FTP Server Detection

The remote host has an installation of Wing FTP server, which offers file transfer functionality over FTP, FTPS, and SFTP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54955; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

ZDI-11-169: IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution Vulnerability

ZDI-11-169: IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-169 May 31, 2011 -- CVE ID: CVE-2011-1220 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Endpoint --...

Fedora 15 : systemtap-1.4-9.fc15 (2011-7314)

Two divide-by-zero flaws were found in the way systemtap interpreted certain corrupted DWARF expressions. A privileged user able to execute arbitrary systemtap scripts could be tricked into triggering this flaw to crash the target machine. An unprivileged user in the stapusr group may be able to...

Fedora 14 : systemtap-1.4-6.fc14 (2011-7302)

Two divide-by-zero flaws were found in the way systemtap interpreted certain corrupted DWARF expressions. A privileged user able to execute arbitrary systemtap scripts could be tricked into triggering this flaw to crash the target machine. An unprivileged user in the stapusr group may be able to...

Fedora 13 : systemtap-1.4-6.fc13 (2011-7289)

Two divide-by-zero flaws were found in the way systemtap interpreted certain corrupted DWARF expressions. A privileged user able to execute arbitrary systemtap scripts could be tricked into triggering this flaw to crash the target machine. An unprivileged user in the stapusr group may be able to...

AIX 610005 : U841418

The remote host is missing AIX PTF U841418 which is related to the security of the package bos.rte.control.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...