Ubuntu 10.04 LTS / 10.10 : thunderbird vulnerabilities (USN-998-1)

Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov, Josh Soref, Gary Kwong, Martijn Wargers, Siddharth Agarwal and Michal Zalewski discovered various flaws in the browser engine. An attacker could exploit this to crash Thunderbird or possibly run arbitrary code as the user invoking the...

Ubuntu 9.10 / 10.04 LTS / 10.10 : webkit vulnerabilities (USN-1006-1)

A large number of security issues were discovered in the WebKit browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

MS10-038: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2027452) (Mac OS X)

The remote Mac OS X host is running a version of Microsoft Excel that is affected by several vulnerabilities. If an attacker can trick a user on the affected host into opening a specially crafted Excel file, these issues could be leveraged to execute arbitrary code subject to the user's privilege...

Fedora 13 : freetype-2.3.11-6.fc13 (2010-15705)

Mon Oct 4 2010 Marek Kasik 2.3.11-6 - Add freetype-2.3.11-CVE-2010-2805.patch Fix comparison. - Add freetype-2.3.11-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.3.11-CVE-2010-2808.patch Check the total length of collected POST segments. - Add...

Fedora 14 : java-1.6.0-openjdk-1.6.0.0-44.1.9.1.fc14 (2010-16312)

Bug 533125 - CVE-2009-3555 TLS: MITM attacks via session renegotiation - Bug 642202 - CVE-2010-3541 CVE-2010-3573 OpenJDK HttpURLConnection allows arbitrary request headers 6961084,6980004 - Bug 639909 - CVE-2010-3548 OpenJDK DNS server IP address information leak 6957564 - Bug 642180 -...

Fedora 12 : seamonkey-2.0.8-1.fc12 (2010-15184)

Update to new upstream SeaMonkey version 2.0.8, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html seamonkey2.0.7 Upstream release notes : - http://www.seamonkey-project.org/releases/seamonkey2.0.8 / -...

Ubuntu 10.10 : postgresql-8.4 vulnerability (USN-1002-2)

USN-1002-1 fixed vulnerabilities in PostgreSQL. This update provides the corresponding update for Ubuntu 10.10. It was discovered that PostgreSQL did not properly enforce permissions within sessions when PL/Perl and PL/Tcl functions or operators were redefined. A remote authenticated attacker cou...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS / 10.10 : openssl vulnerabilities (USN-1003-1)

It was discovered that OpenSSL incorrectly handled return codes from the bnwexpand function calls. A remote attacker could trigger this flaw in services that used SSL to cause a denial of service or possibly execute arbitrary code with application privileges. This issue only affected Ubuntu 6.06...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : postgresql-8.1, postgresql-8.3, postgresql-8.4 vulnerability (USN-1002-1)

It was discovered that PostgreSQL did not properly enforce permissions within sessions when PL/Perl and PL/Tcl functions or operators were redefined. A remote authenticated attacker could exploit this to execute arbitrary code with permissions of a different user, possibly leading to privilege...

Solaris 10 (x86) : 140861-02 (deprecated)

SunOS 5.10x86: su patch. Date this patch was last updated by Sun : Oct/06/10 This plugin has been deprecated and either replaced with individual 140861 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Fedora 14 : seamonkey-2.0.8-1.fc14 (2010-15135)

Update to new upstream SeaMonkey version 2.0.8, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/seamonkey20.html seamonkey2.0.7 Upstream release notes : - http://www.seamonkey-project.org/releases/seamonkey2.0.8 / -...

Fedora 13 : cabextract-1.3-1.fc13 / libmspack-0.2-0.1.20100723alpha.fc13 (2010-14722)

The remote Fedora host is missing one or more security updates : cabextract-1.3-1.fc13 : - Mon Sep 13 2010 Dan Horak - 1.3-1 - updated to 1.3 - built with system copy of libmspack CVE-2010-2800 CVE-2010-2801 libmspack-0.2-0.1.20100723alpha.fc13 : - Mon Aug 30 2010 Dan Horak - 0.2-0.1.20100723alph...

Fedora 14 : mysql-5.1.50-2.fc14 (2010-15147)

Update to mysql 5.1.50, for numerous bug fixes including some low-grade security issues. See upstream release notes at : - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.htm l Note that Tenable Network Security has extracted the...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : libhx vulnerability (USN-994-1)

It was discovered that libHX incorrectly handled certain parameters to the HXsplit function. An attacker could use this flaw to cause a denial of service or possibly execute arbitrary code with the privileges of the user. The default compiler options for affected releases should reduce the...

Fedora 13 : mysql-5.1.50-2.fc13 (2010-15166)

Update to mysql 5.1.50, for numerous bug fixes including some low-grade security issues. See upstream release notes at : - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-50.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.htm l Note that Tenable Network Security has extracted the...

External URLs

Nessus gathered HREF links to external sites by crawling the remote web server. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid49704; scriptversion"$Revision: 1.3 $"; scriptcvsdate"$Date: 2011/08/19 19:59:18 $"; scriptnameenglish:"External URLs";...

RSP Detection

An RSP agent is running on this port. RSP is an agent-based system management and monitoring tool from Draconis Software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49689; scriptversion "1.3"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"RSP Detection";...

Fedora 14 : firefox-3.6.10-1.fc14 / galeon-2.0.7-33.fc14 / gnome-python2-extras-2.25.3-23.fc14 / etc (2010-15093)

Update to new upstream Firefox version 3.6.10, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/firefox36.htmlf irefox3.6.9 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

Fedora 13 : firefox-3.6.10-1.fc13 / galeon-2.0.7-33.fc13 / gnome-python2-extras-2.25.3-22.fc13 / etc (2010-15070)

Update to new upstream Firefox version 3.6.10, fixing multiple security issues detailed in the upstream advisories : http://www.mozilla.org/security/known-vulnerabilities/firefox36.htmlf irefox3.6.9 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

AIX 530010 : U837837

The remote host is missing AIX PTF U837837 which is related to the security of the package bos.rte.control You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...