OS Identification : SNMP hrSWInstalledName

The remote operating system can be identified by querying its hrSWInstalledName object using SNMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51859; scriptversion"1.5"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"OS Identification : SNMP hrSWInstalledName...

Fedora 14 : wireshark-1.4.3-1.fc14 (2011-0450)

Mon Jan 17 2011 Jan Safranek - 1.4.2-3 - upgrade to 1.4.3 - see http://www.wireshark.org/docs/relnotes/wireshark-1.4.3 .html - Wed Jan 5 2011 Jan Safranek - 1.4.2-2 - fixed buffer overflow in ENTTEC dissector 666897 - Mon Nov 22 2010 Jan Safranek - 1.4.2-1 - upgrade to 1.4.2 - see...

Fedora 13 : bugzilla-3.4.10-1.fc13 (2011-0755)

Some serious security issues were discovered in Bugzilla and have been fixed in 3.4.10 and 3.6.4. See http://www.bugzilla.org/security/3.2.9/ for details. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : subversion vulnerabilities (USN-1053-1)

It was discovered that Subversion incorrectly handled certain 'partial access' privileges in rare scenarios. Remote authenticated users could use this flaw to obtain sensitive information revision properties. This issue only applied to Ubuntu 6.06 LTS. CVE-2007-2448 It was discovered that the...

Fedora 14 : dhcp-4.2.0-19.P2.fc14 (2011-0862)

A flaw was discovered in the way the dhcpd daemon processed a message for an address that had been previously declined and internally tagged as abandoned. Processing such a message could trigger an assert failure that could crash dhcpd if it was running as a DHCPv6 server. DHCPv4 servers are...

Fedora 14 : proftpd-1.3.3d-1.fc14 (2011-0610)

This is an update to the current upstream maintenance release, which addresses a security issue that could affect users of the modsql module not enabled by default. - A heap-based buffer overflow flaw was found in the way ProFTPD FTP server prepared SQL queries for certain usernames, when the...

Fedora 14 : libuser-0.56.18-3.fc14 (2011-0316)

Fixes default userPassword value on LDAP; note that this affects only accounts for which the password was not changed later. In addition to installing this update, maintainers of LDAP servers used for authentication should review their LDAP directory for unexpected plaintext userPassword values...

Citrix Provisioning Services Detection

The remote host is running Citrix Provisioning Services, a virtualization application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51663; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptxrefname:"IAVT",...

Fedora 13 : libuser-0.56.16-1.fc13.2 (2011-0320)

Fixes default userPassword value on LDAP; note that this affects only accounts for which the password was not changed later. In addition to installing this update, maintainers of LDAP servers used for authentication should review their LDAP directory for unexpected plaintext userPassword values...

Fedora 13 : maniadrive-1.2-26.fc13.1 / maniadrive-data-1.2-5.fc13 / php-5.3.5-1.fc13 / etc (2011-0321)

This release resolves a critical issue, reported as PHP bug 53632 and CVE-2010-4645, where conversions from string to double might cause the PHP interpreter to hang on systems using x87 FPU registers. Note that Tenable Network Security has extracted the preceding description block directly from t...

Ubuntu 9.10 / 10.04 LTS / 10.10 : sudo vulnerability (USN-1046-1)

Alexander Kurtz discovered that sudo would not prompt for a password when a group was specified in the RunasSpec. A local attacker could exploit this to execute arbitrary code as the specified group if sudo was configured to allow the attacker to use a program as this group. The group RunasSpec i...

Fedora 14 : subversion-1.6.15-1.fc14 (2011-0099)

This release includes the latest Subversion release, fixing several bugs : - improve svnsync handling of dir copies - hide unreadable dirs in moddavsvn's GET response - make 'svnmucc propsetf' actually work - limit memory fragmentation in svnserve - fix 'svn export' regression from 1.6.13 - fix...

Fedora 14 : Django-1.2.4-1.fc14 (2011-0120)

Mon Jan 3 2011 Steve 'Ashcrow' Milner - 1.2.4-1 - Update for multiple security issues see http://www.djangoproject.com/weblog/2010/dec/22/securi ty/ - Sat Oct 9 2010 Steve 'Ashcrow' Milner - 1.2.3-3 - Now build docs for F12+ - Added Django-remove-djangodocs-ext.patch - Sat Oct 9 2010 Steve...

Fedora 14 : pcsc-lite-1.6.4-3.fc14 (2011-0164)

This update fixes the following security issue : A stack-based buffer overflow flaw was found in the way PC/SC Lite smart card framework decoded certain attribute values of the Answer-to-Reset ATR message, received back from the card after connecting. A local attacker could use this flaw to execu...

Fedora 13 : evince-2.30.3-2.fc13 (2011-0224)

Thu Jan 6 2011 Marek Kasik - 2.30.3-2 - Fixes CVE-2010-2640, CVE-2010-2641, CVE-2010-2642 and CVE-2010-2643 - Resolves: 667573 - Fri Jun 25 2010 Marek Kasik - 2.30.3-1 - Update to 2.30.3 - Tue Jun 22 2010 Marek Kasik - 2.30.2-1 - Update to 2.30.2 resolves 587495 - Remove unused patches - Tue Jun...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : php5 vulnerabilities (USN-1042-1)

It was discovered that an integer overflow in the XML UTF-8 decoding code could allow an attacker to bypass cross-site scripting XSS protections. This issue only affected Ubuntu 6.06 LTS, Ubuntu 8.04 LTS, and Ubuntu 9.10. CVE-2009-5016 It was discovered that the XML UTF-8 decoding code did not...

Fedora 13 : webkitgtk-1.2.6-1.fc13 (2011-0121)

New stable release, API and ABI compatible with previous 1.2.x versions - Fixes crashes with newer libpng = 1.4 - The patches to fix the following CVEs are included with help from Huzaifa Sidhpurwala from the Red Hat security team CVE-2010-4198 CVE-2010-4197 CVE-2010-4204 CVE-2010-4206...

Fedora 13 : pidgin-2.7.9-1.fc13 (2010-19317)

New release 2.7.9 Upstream ChangeLog : http://developer.pidgin.im/wiki/ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Ubuntu 9.10 / 10.04 LTS / 10.10 : dpkg vulnerability (USN-1038-1)

Jakub Wilk and Raphael Hertzog discovered that dpkg-source did not correctly handle certain paths and symlinks when unpacking source-format version 3.0 packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files...

Ubuntu 9.10 / 10.04 LTS / 10.10 : apparmor update (USN-1039-1)

It was discovered that if AppArmor was misconfigured, under certain circumstances the parser could generate policy using an unconfined fallback execute transition when one was not specified. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...