Fedora 15 : firefox-6.0.2-1.fc15 / gnome-python2-extras-2.25.3-34.fc15 / mozvoikko-1.9.0-7.fc15 / etc (2011-12280)

The latest version of Firefox and Thunderbird has the following changes : - Removed trust exceptions for certificates issued by Staat der Nederlanden see bug mozbz683449 and the security advisory - Resolved an issue with gov.uk websites see bug mozbz669792 Note that Tenable Network Security has...

Fedora 16 : ca-certificates-2011.78-1.fc16 (2011-11907)

This update includes the latest updates to the root Certificate Authority list from Mozilla. It was found that a Certificate Authority CA issued fraudulent HTTPS certificates. This update removes that CA's root certificate from the ca-certificates package, rendering any HTTPS certificates signed ...

stunnel 4.4x < 4.42 Unspecified Memory Corruption

The version of stunnel 4.4x installed on the remote host is a version prior to 4.42. It is, therefore, affected by a memory corruption vulnerability that allows a remote attacker to cause a denial of service condition or execution of arbitrary code. C Tenable Network Security, Inc...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : apache2 vulnerability (USN-1199-1)

A flaw was discovered in the byterange filter in Apache. A remote attacker could exploit this to cause a denial of service via resource exhaustion. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to...

Ubuntu 10.04 LTS / 10.10 / 11.04 : firefox, xulrunner-1.9.2 vulnerability (USN-1197-1)

It was discovered that Dutch Certificate Authority DigiNotar had mis-issued multiple fraudulent certificates. These certificates could allow an attacker to perform a 'man in the middle' MITM attack which would make the user believe their connection is secure, but is actually being monitored. For...

Fedora 16 : firefox-6.0-1.fc16 / mozvoikko-1.9.0-6.fc16 / thunderbird-6.0-1.fc16 / etc (2011-11046)

Update to new upstream Firefox version 6.0 and Thunderbird version 6.0, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/announce/2011/mfsa2011-2 9.html - http://www.mozilla.org/security/announce/2011/mfsa2011 -31.html This update also includ...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : foomatic-filters vulnerabilities (USN-1194-1)

It was discovered that the foomatic-rip Foomatic filter incorrectly handled command-line options. An attacker could use this flaw to cause Foomatic to execute arbitrary code as the 'lp' user. In the default installation, attackers would be isolated by the CUPS AppArmor profile. Note that Tenable...

Fedora 16 : bugzilla-4.0.2-1.fc16 (2011-10399)

The Bugzilla developers have discovered a number of security bugs in Bugzilla. These are CVE-2011-2379, CVE-2011-2380, CVE-2011-2979, CVE-2011-2381, CVE-2011-2978, CVE-2011-2977. This release fixes these bugs. See http://www.bugzilla.org/security/3.4.11/ for all known details. Note that Tenable...

Fedora 14 : kernel-2.6.35.14-95.fc14 (2011-11103)

Update to kernel 2.6.35.14 : http://ftp.kernel.org/pub/linux/kernel/v2.6/longterm/v2.6.35/ChangeLog -2.6.35.14 NOTE: These upstream commits from 2.6.35.14 were already in the previous Fedora 14 kernel 2.6.35.13-92 : b934c20de1398d4a82d2ecfeb588a214a910f13f 3cd01976e702ccaffb907727caff4f8789353599...

Ubuntu 11.04 : linux vulnerabilities (USN-1193-1)

Timo Warns discovered that the GUID partition parsing routines did not correctly validate certain structures. A local attacker with physical access could plug in a specially crafted block device to crash the system, leading to a denial of service. CVE-2011-1577 Phil Oester discovered that the...

Fedora 14 : bugzilla-3.6.6-1.fc14 (2011-10413)

The Bugzilla developers have discovered a number of security bugs in Bugzilla. These are CVE-2011-2379, CVE-2011-2380, CVE-2011-2979, CVE-2011-2381, CVE-2011-2978, CVE-2011-2977. This release fixes these bugs. See http://www.bugzilla.org/security/3.4.11/ for all known details. Note that Tenable...

Fedora 14 : zabbix-1.8.6-1.fc14 (2011-10601)

update to 1.8.6 - upstream changelog at http://www.zabbix.com/rn1.8.6.php Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 14 : NetworkManager-0.8.4-2.git20110622.fc14 (2011-8612)

This update fixes the security issue for creating shared WiFi networks. It's been tracked by 709662 - CVE-2011-2176. Before this update, NetworkManager didn't respect PolicyKit policies for creating shared WiFi networks: actions org.freedesktop.network-manager-settings.system.wifi.share.open and...

Fedora 15 : openarena-0.8.5-4.fc15 / quake3-1.36-11.svn2102.fc15 (2011-9774)

Update to 1.36 svn snapshot r2102 - This fixes 2 security issues where a malicious server could execute arbitrary code on connecting clients rhbz725951 : - CVE-2011-1412: Execute arbitrary shell commands on connecting clients - CVE-2011-2764: Arbitrary code execution when native-code DLLs are...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : samba vulnerabilities (USN-1182-1)

Yoshihiro Ishikawa discovered that the Samba Web Administration Tool SWAT was vulnerable to cross-site request forgeries CSRF. If a Samba administrator were tricked into clicking a link on a specially crafted web page, an attacker could trigger commands that could modify the Samba configuration...

HP Insight Control Performance Management Installed

HP Insight Control Performance Management is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55748; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"HP Insight Contro...

Ubuntu 10.04 LTS / 10.10 / 11.04 : icedtea-web, openjdk-6, openjdk-6b18 vulnerabilities (USN-1178-1)

Omair Majid discovered that an unsigned Web Start application or applet could determine the path to the cache directory used to store downloaded class and jar files by querying class loader properties. This could allow a remote attacker to discover a user's name and home directory path...

Fedora 14 : libpng10-1.0.55-1.fc14 (2011-8867)

This update fixes a 1-byte uninitialized memory reference in pngformatbuffer. It allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message. This is CVE-2011-2501. Also fixed in this...

Fedora 15 : libpng10-1.0.55-1.fc15 (2011-8844)

This update fixes a 1-byte uninitialized memory reference in pngformatbuffer. It allows attackers to cause a denial of service crash via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message. This is CVE-2011-2501. Also fixed in this...

ZDI-11-238: Oracle Secure Backup validate_login Command Injection Remote Code Execution Vulnerability

ZDI-11-238: Oracle Secure Backup validatelogin Command Injection Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-238 July 21, 2011 -- CVE ID: CVE-2011-2261 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Oracle -- Affected Products: Oracle Secu...