iCloud Detection (Windows)

iCloud is installed on this host. It is a cloud storage and computing service from Apple. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58292; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"iCloud...

Fedora 15 : postgresql-9.0.7-1.fc15 (2012-2589)

Update to latest Postgres releases --- resolves some security and data loss bugs http://www.postgresql.org/docs/9.1/static/release-9-1-3.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html Note that Tenable Network Security has extracted the preceding description block directly from...

Fedora 15 : httpd-2.2.22-1.fc15 (2012-1642)

This update contains the latest stable release of the Apace HTTP Server, version 2.2.22. This release fixes various bugs, and the following security issues : - Reject requests where the request-URI does not match the HTTP specification, preventing unexpected expansion of target URLs in some rever...

Fedora 17 : java-1.7.0-openjdk-1.7.0.3-2.1.fc17 (2012-2595)

Updated to OpenJDK7u3/IcedTea7 2.1 - Removed upstreamed glibc nameclash patch - Added patch to remove the -mimpure option to gcc - Security fixes : - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object - S7082299, CVE-2011-3571: AtomicReferenceArray insufficient array type...

Fedora 17 : tremulous-1.2.0-0.4.beta1.fc17 (2012-2238)

Fixes CVE-2011-2764 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : python-httplib2 vulnerability (USN-1375-1)

The httplib2 Python library earlier than version 0.7.0 did not perform any server certificate validation when using HTTPS connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information in applications...

Microsoft Silverlight Installed (Mac OS X)

A version of Microsoft Silverlight is installed on this host. Microsoft Silverlight is a web application framework that provides functionalities similar to those in Adobe Flash, integrating multimedia, graphics, animations and interactivity into a single runtime environment. TRUSTED...

Ubuntu 10.04 LTS / 10.10 : xulrunner-1.9.2 vulnerability (USN-1367-4)

USN-1367-1 fixed vulnerabilities in libpng. This provides the corresponding update for Xulrunner. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a...

Fedora 15 : usbmuxd-1.0.7-3.fc15 (2012-1213)

Fixes CVE-2012-0065 It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user. Note that Tenable Networ...

Fedora 16 : usbmuxd-1.0.7-3.fc16 (2012-1192)

Fixes CVE-2012-0065 It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user. Note that Tenable Networ...

Fedora 16 : seamonkey-2.7.1-1.fc16 (2012-1665)

Update to 2.7.1 mozilla security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : devscripts vulnerabilities (USN-1366-1)

Paul Wise discovered that debdiff did not properly sanitize its input when processing .dsc and .changes files. If debdiff processed a crafted file, an attacker could execute arbitrary code with the privileges of the user invoking the program. CVE-2012-0210 Raphael Geissert discovered that debdiff...

Kayako SupportSuite Detection

The remote web server is running Kayako SupportSuite, a customer support application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57975; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

Ubuntu 10.10 : linux vulnerabilities (USN-1361-1)

Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. CVE-2011-3353 A flaw was found in KVM's Programmable Interval Timer PIT. When a virtual interrupt control is not available a local user could use this to caus...

OS Identification : SMTP

Nessus was able to identify the remote operating system based on the banner reported by the mail server running on it. C Tenable, Inc. include"compat.inc"; if description scriptid57915; scriptversion"2.38"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/03/31";...

Fedora 15 : kernel-2.6.42.3-2.fc15 (2012-1503)

CVE-2011-4086: jbd2: unmapped buffer with Unwritten or Delay flags set can lead to DoS rhbz 788260 This update rebases the kernel to the newest upstream stable release 3.2.3. As with previous updates, it presents itself as 2.6.xx still, for compatibility reasons. Note that Tenable Network Securit...

Fedora 16 : znc-0.204-3.fc16 / znc-infobot-0.204-1.fc16 (2012-0921)

Upgrade to 0.204, add init script for EPEL Update to 0.204 to fix CVE-2012-0033 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...

Fedora 16 : ettercap-0.7.4-3.fc16 (2012-1054)

New upstream, and patch for insecure global settings file. Restored RPMOPTFLAGS to build. New upstream, and patch for insecure global settings file. New upstream, and patch for insecure global settings file. New upstream, and patch for insecure global settings file. Note that Tenable Network...

Fedora 16 : mysql-5.5.20-1.fc16 (2012-0972)

Update to MySQL 5.5.20, for various fixes described at http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html as well as security fixes described at http://www.oracle.com/technetwork/topics/security/cpujan 2012-366304.html - Re-include the mysqld logrotate script, now that it's not so bogus Note...