Ubuntu 11.10 / 12.04 LTS / 12.10 : gnome-online-accounts vulnerability (USN-1779-1)

It was discovered that GNOME Online Accounts did not properly check SSL certificates when configuring online accounts. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise credentials and confidential information. Note that...

Fedora 18 : mimetex-1.74-1.fc18 (2013-3910)

Fixes for CVE-2009-1382 CVE-2009-2459 for EL-5, update to latest upstream for all releases. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-1776-1)

A flaw was reported in the permission checks done by the Linux kernel for /dev/cpu//msr. A local root user with all capabilities dropped could exploit this flaw to execute code with full root capabilities. CVE-2013-0268 A flaw was discovered in the Linux kernels handling of memory ranges with...

Fedora 17 : mimetex-1.74-1.fc17 (2013-3902)

Fixes for CVE-2009-1382 CVE-2009-2459 for EL-5, update to latest upstream for all releases. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 17 : mediawiki-1.19.4-2.fc17 (2013-3227)

Bring mediawiki up to date to fix multiple bugs, security holes, and bring new features. The package should automatically attempt to upgrade your wiki, but please make sure to perform backups before updating. Special care may be required for MySQL based wikis. See bug 845818. Read the main...

Fedora 17 : privoxy-3.0.21-1.fc17 (2013-3756)

Common Vulnerabilities and Exposures assigned an identifier CVE-2013-2503 to the following vulnerability : Privoxy before 3.0.21 does not properly handle Proxy-Authenticate and Proxy-Authorization headers in the client-server data stream, which makes it easier for remote HTTP servers to spoof the...

Fedora 17 : kernel-3.8.3-103.fc17 (2013-3909)

Update to Linux v3.8.3. Wide variety of fixes across the tree. Contains reverts from upstream 3.8.3 to fix Intel GM45 graphics. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

Fedora 18 : gnome-online-accounts-3.6.3-1.fc18 (2013-3414)

Update to 3.6.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : perl vulnerability (USN-1770-1)

Yves Orton discovered that Perl incorrectly handled hashing when using user-provided hash keys. An attacker could use this flaw to perform a denial of service attack against software written in Perl. Note that Tenable Network Security has extracted the preceding description block directly from th...

Foxit Advanced PDF Editor Installed

Foxit Advanced PDF Editor formerly known as Foxit PDF Editor, a PDF file editor, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65613; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : nss vulnerability (USN-1763-1)

Nadhem Alfardan and Kenny Paterson discovered that the TLS protocol as used in NSS was vulnerable to a timing side-channel attack known as the 'Lucky Thirteen' issue. A remote attacker could use this issue to perform plaintext-recovery attacks via analysis of timing data. Note that Tenable Networ...

Fedora 18 : mingw-gnutls-2.12.23-1.fc18 (2013-3453)

Version 2.12.23 released 2012-02-04 - libgnutls: Eliminated memory leak in PCKS 11 initialization. Report and fix by Sam Varshavchik. - libgnutls: Fixes in record padding parsing to prevent a timing attack. Issue reported by Kenny Patterson and Nadhem Alfardan. - libgnutls: DN variable 'T' was...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : thunderbird vulnerability (USN-1758-2)

USN-1758-1 fixed vulnerabilities in Firefox. This update provides the corresponding update for Thunderbird. It was discovered that Firefox contained a memory safety issue. If a user were tricked into opening a specially crafted page with the HTML editor, a remote attacker could exploit this to...

Fedora 17 : vdsm-4.10.0-13.fc17 (2013-0210)

Move the certificate generation to the service startup Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 18 : kernel-3.8.2-206.fc18 (2013-3630)

This 3.8.2 update fixes contains a wide variety of important fixes including an issue that many users have seen with backlight during resume. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 18 : python-tw2-jquery-2.0.3-5.fc18 (2013-1277)

Remove old bundled versions of jquery. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Ubuntu 9.10 : krb5 vulnerability (USN-879-1)

Jeff Blaine, Radoslav Bodo, Jakob Haufe, and Jorgen Wahlsten discovered that the Kerberos Key Distribution Center service did not correctly verify certain network traffic. An unauthenticated remote attacker could send a specially crafted request that would cause the KDC to crash, leading to a...

Ubuntu 6.06 LTS : firefox vulnerabilities (USN-690-3)

Several flaws were discovered in the browser engine. These problems could allow an attacker to crash the browser and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Firefox could be bypassed by utilizing XBL-bindings. An...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh vulnerability (USN-612-2)

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...

Ubuntu 6.06 LTS : firefox vulnerabilities (USN-645-2)

USN-645-1 fixed vulnerabilities in Firefox and xulrunner for Ubuntu 7.04, 7.10 and 8.04 LTS. This provides the corresponding update for Ubuntu 6.06 LTS. Justin Schuh, Tom Cross and Peter Williams discovered errors in the Firefox URL parsing routines. If a user were tricked into opening a crafted...