Ubuntu 11.10 : libav vulnerabilities (USN-1674-1)

It was discovered that Libav incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Not...

Ubuntu 10.04 LTS : ffmpeg vulnerabilities (USN-1675-1)

It was discovered that FFmpeg incorrectly handled certain malformed media files. If a user were tricked into opening a crafted media file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. No...

Ubuntu 10.04 LTS : bogofilter vulnerability (USN-1667-1)

Julius Plenz discovered that bogofilter incorrectly handled certain invalid base64 code. By sending a specially crafted email, a remote attacker could exploit this and cause bogofilter to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Securi...

Fedora 17 : perl-5.14.3-218.fc17 / perl-CGI-3.52-218.fc17 (2012-19282)

Fix CVE-2012-5526 escape new-lines in Set-Cookie and P3P HTTP response headers properly in CGI-3.52. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

MS12-077: Cumulative Security Update for Internet Explorer (2761465)

The remote host is missing Internet Explorer IE Security Update 2761465. The installed version of IE is affected by vulnerabilities that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63224;...

Asterisk Detection

One or more Asterisk SIP services are listening on the remote host. This is an indication that Asterisk PBX is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63202; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 18 : gnome-system-log-3.6.1-2.fc18 (2012-18579)

This update changes gnome-system-log to use a stricter polkit policy when running with elevated privileges. Previously, it would only ask for the user's own password; now it requires anadministrator password. This problem has been reported as CVE-2012-5535 Note that Tenable Network Security has...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : libxml2 vulnerability (USN-1656-1)

It was discovered that libxml2 had a heap-based buffer underflow when parsing entities. If a user or automated system were tricked into processing a specially crafted XML document, applications linked against libxml2 could be made to crash or possibly execute arbitrary code. Note that Tenable...

Fedora 17 : android-tools-20121120git3ddc005-1.fc17 (2012-18748)

Update to upstream git commit 3ddc005 - Added more udev devices - Added ext4utils from extras for fastboot - Updated makefiles - Resolves: rhbz 869624 start adb server by udev For security reasons fastboot is now need to be run as root to be able to access devices. Note that Tenable Network...

Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerabilities (USN-1652-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 11.10 : linux vulnerabilities (USN-1648-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 12.10 : linux vulnerabilities (USN-1646-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-1644-1)

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. CVE-2012-0957 Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cau...

Fedora 18 : system-config-users-1.3.1-1.fc18 (2012-17513)

This update uses pkexec instead of consolehelper/usermode. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora 18 : system-config-date-1.10.3-1.fc18 / system-config-nfs-1.4.1-1.fc18 (2012-17797)

This updates tightens policy so that only administrative users can make changes to the system as it was before using pkexec instead of consolehelper. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted ...

Fedora 17 : weechat-0.3.8-4.fc17 (2012-18526)

Fix arbitrary code execution due to call of shell when executing command within hookprocess Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 17 : libssh-0.5.3-1.fc17 (2012-18677)

This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

VMware OVF Tool Installed

VMware OVF Tool, a command line utility that supports importing and exporting of OVF templates, is installed on the remote Windows host. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid63074; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 18 : bugzilla-4.2.4-1.fc18 (2012-18264)

These releases fix a number of issues with Bugzilla. - Confidential product and component names can be disclosed to unauthorized users if they are used to control the visibility of a custom field. - When calling the 'User.get' WebService method with a 'groups' argument, it is possible to check if...

Fedora 18 : android-tools-20121120git3ddc005-1.fc18 (2012-18802)

Update to upstream git commit 3ddc005 - Added more udev devices - Added ext4utils from extras for fastboot - Updated makefiles - Resolves: rhbz 869624 start adb server by udev For security reasons fastboot is now need to be run as root to be able to access devices. Note that Tenable Network...