Ubuntu 12.04 LTS / 12.10 / 13.04 : firefox vulnerabilities (USN-1822-1)

Multiple memory safety issues were discovered in Firefox. If the user were tricked into opening a specially crafted page, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox...

Ubuntu 12.04 LTS / 12.10 / 13.04 : thunderbird vulnerabilities (USN-1823-1)

Multiple memory safety issues were discovered in Thunderbird. If the user were tricked into opening a specially crafted message with scripting enabled, an attacker could possibly exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of t...

Fedora 18 : phpMyAdmin-3.5.8.1-1.fc18 (2013-6977)

phpMyAdmin 3.5.8.1 2013-04-24 =============================== - security Remote code execution pregreplace, reported by Janek Vind see PMASA-2013-2 - security Locally Saved SQL Dump File Multiple File Extension Remote Code Execution, reported by Janek Vind see PMASA-2013-3 Note that Tenable Netwo...

Fedora 19 : phpMyAdmin-3.5.8.1-1.fc19 (2013-6928)

phpMyAdmin 3.5.8.1 2013-04-24 =============================== - security Remote code execution pregreplace, reported by Janek Vind see PMASA-2013-2 - security Locally Saved SQL Dump File Multiple File Extension Remote Code Execution, reported by Janek Vind see PMASA-2013-3 Note that Tenable Netwo...

Fedora 19 : libtiff-4.0.3-6.fc19 (2013-7339)

Repair minor security issues CVE-2013-1960, CVE-2013-1961 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Microsoft Windows Wireless Network History

Using the supplied credentials, this plugin reports wireless networks that this computer has connected to as well as the settings for Windows Vista and later systems. %NASLMINLEVEL 5200 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66350; scriptversion"1.8";...

Adobe RoboHelp Server Installed

Adobe RoboHelp Server, used to manage web help systems and knowledge bases, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66315; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Fedora 17 : telepathy-idle-0.1.15-1.fc17 (2013-6557)

This release validate TLS certificates properly, preventing man-in-the-middle attacks. This will be a regression for users of IRC-over-SSL servers/proxies that do not have a certificate trusted by system-wide CA configuration; they will no longer be able to connect. If someone implements fd.o...

Ubuntu 13.04 : linux vulnerabilities (USN-1815-1)

Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 Andy Lutomirski discovered a privilege escalation in the Linux kernel's user namespaces. A local user could exploit th...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1812-1)

Mathias Krause discovered an information leak in the Linux kernel's UDF file system implementation. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6548 Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver...

Google Apps Directory Sync < 3.1.6 Weak Stored Credential Local Disclosure

The version of Google Apps Directory Sync installed on the remote host is earlier than 3.1.6 and is, therefore, affected by a weak stored credential local disclosure vulnerability. An issue exists in the way 'PBEwithMD5andDES' Java encryption algorithm is implemented, allowing a local attacker to...

Fedora 19 : telepathy-idle-0.1.15-1.fc19 (2013-6591)

This release validate TLS certificates properly, preventing man-in-the-middle attacks. This will be a regression for users of IRC-over-SSL servers/proxies that do not have a certificate trusted by system-wide CA configuration; they will no longer be able to connect. If someone implements fd.o...

Fedora 18 : php-twig-Twig-1.12.3-1.fc18 (2013-6114)

Updated to version 1.12.3 See: http://blog.twig.sensiolabs.org/post/47461911874/security-release-twig -1-12-3-released Full change log: https://github.com/fabpot/Twig/blob/v1.12.3/CHANGELOG Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Ubuntu 13.04 : mysql-5.5 vulnerabilities (USN-1807-2)

USN-1807-1 fixed vulnerabilities in MySQL. This update provides MySQL 5.5.31 for Ubuntu 13.04. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.1.69 in Ubuntu 10.04 LTS and Ubuntu 11.10. Ubuntu...

Fedora 19 : mediawiki-1.20.4-1.fc19 (2013-5874)

An internal review discovered that specially crafted Lua function names could lead to XSS. https://bugzilla.wikimedia.org/showbug.cgi?id=46084 - Daniel Franke reported that during SVG parsing, MediaWiki failed to prevent XML external entity XXE processing. This could lead to local file...

Ubuntu 11.10 / 12.04 LTS : icedtea-web regression (USN-1804-2)

USN-1804-1 fixed vulnerabilities in IcedTea-Web. This update introduced a regression with the Java Network Launching Protocol JNLP when fetching content over SSL under certain configurations, such as when using the community-supported IcedTead 7 browser plugin. This update fixes the problem. We...

Solaris 10 (sparc) : 144996-02 (deprecated)

SunOS 5.10: Ant source patch. Date this patch was last updated by Sun : Apr/11/13 This plugin has been deprecated and either replaced with individual 144996 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Fedora 19 : phpMyAdmin-3.5.8-1.fc19 (2013-5604)

phpMyAdmin 3.5.8.0 2013-04-08 =============================== - bug MariaDB reported as MySQL - bug Incorrect header for Safari 6.0 - bug Attempt to open trigger for edit gives NULL - change Use HTML5 DOCTYPE - security Self-XSS on GIS visualisation page, reported by Janek Vind - bug Incorrect...

Fedora 18 : kernel-3.8.8-202.fc18 (2013-6041)

Update to latest stable upstream release, Linux 3.8.8. This hopefully fixes a PAE pagetable corruption issue we've seen with users running Chrome/Chromium. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : icedtea-web vulnerabilities (USN-1804-1)

Jiri Vanek discovered that IcedTea-Web would use the same classloader for applets from different domains. A remote attacker could exploit this to expose sensitive information or potentially manipulate applets from other domains. CVE-2013-1926 It was discovered that IcedTea-Web did not properly...