Device Type

Based on the remote operating system, it is possible to determine what the remote system type is eg: a printer, router, general-purpose computer, etc. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54615; scriptversion"1.3";...

Adobe Audition Installed

Adobe Audition, an audio and video production application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid54605; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Fedora 15 : xen-4.1.0-2.fc15 (2011-6859)

Overflows in kernel decompression can allow root on xen PV guest to gain privileged access to base domain, or access to xen configuration info. Lack of error checking could allow DoS attack from guest. CVE-2011-1583 Don't require /usr/bin/qemu-nbd as it isn't used at present. Note that Tenable...

AIX 710000 : U842083

The remote host is missing AIX PTF U842083 which is related to the security of the package rsct.opt.stackdump.3.1.0.2 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 710000 : U837276

The remote host is missing AIX PTF U837276 which is related to the security of the package bos.rte.libcfg.7.1.0.15 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Fedora 14 : acpid-2.0.9-1.fc14 (2011-6460)

Tue May 3 2011 Jiri Skala - 2.0.9-1 - fixes 701340 - CVE-2011-1159 acpid: blocked writes can lead to acpid daemon hang - update to latest upstream 2.0.9 - Wed Dec 8 2010 Jiri Skala - 2.0.7-1 - fixes 660459 - Should be able to set options with /etc/sysconfig/acpid - update to latest upstream - Wed...

Fedora 13 : firefox-3.6.17-1.fc13 / galeon-2.0.7-40.fc13 / gnome-python2-extras-2.25.3-29.fc13 / etc (2011-6205)

Update to new upstream Firefox version 3.6.17, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/firefox36.htmlf irefox3.6.17 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox ...

Atlassian Confluence Wiki Detection

Atlassian Confluence, a wiki written in Java, is running on the remote web server. Note: The plugin supports authentication when HTTP basic or digest access credentials are supplied in the configuration. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53574;...

Fedora 15 : libtiff-3.9.5-1.fc15 (2011-5336)

Update to libtiff 3.9.5, incorporating all our previous patches plus other fixes, notably the fix for CVE-2009-5022 Fix incorrect fix for CVE-2011-0192 Add fix for CVE-2011-1167 Fix buffer overrun in fax decoding CVE-2011-0192 as well as a non-security-critical crash in gif2tiff. Note that Tenabl...

Fedora 13 : python-feedparser-5.0.1-1.fc13 (2011-4911)

Current release: 5.0.1 - February 20, 2011 - Fix issue 91 invalid text in XML declaration causes sanitizer to crash - Fix issue 254 sanitization can be bypassed by malformed XML comments - Fix issue 255 sanitizer doesn't strip unsafe URI schemes Previous release: 5.0 - January 25, 2011 - Improved...

Fedora 14 : python-feedparser-5.0.1-1.fc14 (2011-4894)

Current release: 5.0.1 - February 20, 2011 - Fix issue 91 invalid text in XML declaration causes sanitizer to crash - Fix issue 254 sanitization can be bypassed by malformed XML comments - Fix issue 255 sanitizer doesn't strip unsafe URI schemes Previous release: 5.0 - January 25, 2011 - Improved...

Fedora 14 : ikiwiki-3.20110328-1.fc14 (2011-5180)

Update to latest upstream version 3.20110328. Security fixes : - Possible JavaScript insertion via insufficient htmlscrubbing of alternate stylesheets. CVE-2011-1401 - JavaScript insertion via insufficient checking in comments. CVE-2011-0428 See http://ikiwiki.info/news/ for the full list of...

Fedora 15 : openldap-2.4.24-2.fc15 (2011-3612)

Three security issues were fixed during the rebase! Changes not covered by bugs : - new: system resource limiting for slapd using ulimit - fix: possible NULL pointer dereference in NSS implementation OpenLDAP package was rebased to 2.4.24. Extension of API : - libldap adds: ldapdestroy ldapdup...

Fedora 14 : darktable-0.8-7.fc14.1 / exiv2-0.21.1-1.fc14 / geeqie-1.0-9.fc14.1 / gipfel-0.3.2-7.fc14 / etc (2011-5200)

This update is the second in a series of monthly stabilization updates to the 4.6 series. 4.6.2 brings many bugfixes and translation updates on top of the latest edition in the 4.6 series and is a recommended update for everyone running 4.6.1 or earlier versions. See also:...

Fedora 13 : kdenetwork-4.5.5-2.fc13 (2011-5211)

The new package fixes the security in kget. For more info please take a look at http://www.kde.org/info/security/advisory-20100513-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 13 : dhcp-4.1.2-4.ESV.R2.fc13 (2011-0848)

This is a SECURITY release of ISC DHCP, which fixes two security related bugs: CVE-2011-0413: DHCPv6 server CVE-2011-0997: dhclient Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

IBM Tivoli Monitoring Java Unspecified Vulnerability

According to the version found in the .properties files, the remote host has a version of IBM Tivoli Monitoring that contains a Category I security finding in the packaged version of Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53490; scriptversion"1.7";...

Fedora 15 : xorg-x11-server-utils-7.5-5.fc15 (2011-4984)

fixes CVE-2011-0465 root hole via rogue hostname in xrdb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : nss vulnerabilities (USN-1106-1)

It was discovered that several invalid HTTPS certificates were issued and revoked. An attacker could exploit these to perform a man in the middle attack to view sensitive information or alter encrypted communications. These certificates were marked as explicitly not trusted to prevent their misus...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : tiff vulnerability (USN-1102-1)

Martin Barbella discovered that the thunder aka ThunderScan decoder in the TIFF library incorrectly handled an unexpected BitsPerSample value. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privilege...