PHP Version Detection

Nessus was able to determine the version of PHP available on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid48243; scriptversion"1.32"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/01/22"; scriptxrefname:"IAVT",...

Fedora 13 : gnupg2-2.0.14-4.fc13 (2010-11413)

Fri Jul 23 2010 Rex Dieter - 2.0.14-4 - gpgsm realloc patch - Fri Jun 18 2010 Tomas Mraz - 2.0.14-3 - initialize small amount of secmem for list of algorithms in help 598847 necessary in the FIPS mode of libgcrypt Note that Tenable Network Security has extracted the preceding description block...

MDVA-2010:160 : heartbeat

The heartbeat package in the 2010.0 release had wrong permissions and ownership for /usr/bin/clstatus this prevented it from working correctly. Also when peers were outdated heartbeat didn't failover gracefully. This update fixes both these issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

Fedora 12 : sunbird-1.0-0.23.20090916hg.fc12 / thunderbird-3.0.6-1.fc12 (2010-11361)

Update to new upstream Thunderbird version 3.0.6, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security /known-vulnerabilities/thunderbird30.htmlthunderbird3.0.5 http://www.mozilla.org/security/known- vulnerabilities/thunderbird30.htmlthunderbird3.0....

Fedora 13 : libpng10-1.0.54-1.fc13 (2010-10823)

This update addresses two security issues: CVE-2010-1205, in which a buffer overflow might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row. CVE-2010-2249, in which a memory leak allows remote attackers to cause a denial of service memory...

Novell Teaming Detection

The remote web server hosts Novell Teaming, a web-based collaboration application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47803; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Novell Teaming Detection"; scriptsummaryenglish:"Checks fo...

iTunes < 9.2.1 'itpc:' Buffer Overflow (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is older than 9.2.1. Such versions may be affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs which may allow an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker...

VMware Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VMware virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47761;...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : ghostscript vulnerabilities (USN-961-1)

David Srbecky discovered that Ghostscript incorrectly handled debug logging. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program. This issue only affected...

Fedora 12 : qt-4.6.3-8.fc12 (2010-11020)

This is an update to the latest stable bugfix qt release, including several security fixes related to qtwebkit. For details, see also: http://qt.nokia.com/about/news/nokia-releases-qt-4.6.3 http://qt.nokia.com/developer/changes/changes-4.6.3 Note that Tenable Network Security has extracted the...

Xftp < 3.0 Build 242 LIST Response Buffer Overflow

The version of Xftp, an FTP client for Windows, installed on the remote host is older than 3.0 Build 242. Such versions are reportedly affected by a buffer overflow vulnerability. By tricking a user into double-clicking on a file name included in the 'LIST' command response from a malicious FTP...

AIX 610005 : U827864

The remote host is missing AIX PTF U827864 which is related to the security of the package devices.common.IBM.sissas.rte.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Splunk Web Detection

The web interface for Splunk is running on the remote host. Splunk is a search, monitoring, and reporting tool for system administrators. Note that HTTP Basic Authentication credentials may be required to retrieve version information for some recent Splunk releases. TRUSTED...

Fedora 13 : mediawiki-1.15.4-54.fc13 (2010-10779)

This update fixes two vulnerabilities in mediawiki CVE-2010-1647 Cross-site scripting XSS vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets CSS strings that are processed as...

Fedora 12 : rpm-4.7.2-2.fc12 (2010-10617)

Wed Jun 30 2010 Panu Matilainen - 4.7.2-2 - Fix CVE-2010-2059 598775 and CVE-2010-2198 601955 - Tue Dec 8 2009 Panu Matilainen - 4.7.2-1 - update to 4.7.2 http://rpm.org/wiki/Releases/4.7.2 - fix posix chmod test to unbreak %fixperms macro 543035 - avoid looking into OpenPGP subkeys 436812 - dont...

Fedora 12 : mediawiki-1.15.4-54.fc12 (2010-10848)

This update fixes two vulnerabilities in mediawiki CVE-2010-1647 Cross-site scripting XSS vulnerability in MediaWiki 1.15 before 1.15.4 and 1.16 before 1.16 beta 3 allows remote attackers to inject arbitrary web script or HTML via crafted Cascading Style Sheets CSS strings that are processed as...

Fedora 11 : postgresql-8.3.11-1.fc11 (2010-8723)

Update to new minor releases, primarily to fix CVE-2010-1169 and CVE-2010-1170, but see also other fixes at http://www.postgresql.org/docs/8.3/static/release-8-3-11.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 12 : squirrelmail-1.4.20-3.fc12 (2010-10244)

Tue Jun 22 2010 Michal Hlavinka - 1.4.20-3 - fix CVE-2010-1637 : mail fetch plugin's port-scans via non-standard POP3 server ports - Mon Jun 7 2010 Michal Hlavinka - 1.4.20-2 - add note to config file that https connections are forced by default - Mon Mar 8 2010 Michal Hlavinka - 1.4.20-1 -...

Fedora 12 : squid-3.1.0.16-6.fc12 (2010-3064)

Denial of service issue in HTCP processing SQUID-2010:2 http://www.squid- cache.org/Advisories/SQUID-20102.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Fedora 12 : sssd-1.0.1-1.fc12 (2010-0413)

Fixes CVE-2010-0014 - SSSD accepts any password when offline with a valid TGT available Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...