BlackBerry Desktop Manager Intellisync ActiveX Control Arbitrary Remote Code Execution

The version of the Lotus Notes Intellisync component 'lnsresobject.dll' included with the BlackBerry Desktop Software installation on the remote host reportedly contains an unspecified error that can be exploited to execute arbitrary code. If an attacker can trick a user on the affected host into...

Solaris 8 (x86) : 140844-01

SunOS 5.8x86: /usr/sbin/ntpq patch. Date this patch was last updated by Sun : Nov/03/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Adobe ColdFusion Detection

Adobe ColdFusion formerly Macromedia ColdFusion, a rapid application development platform, is running on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42339; scriptversion"1.16"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 10 : BackupPC-3.1.0-6.fc10 (2009-9973)

Fri Sep 25 2009 Johan Cwiklinski 3.1.0-6 - Fix security bug bug 518412 - Fri Sep 18 2009 Johan Cwiklinski 3.1.0-5 - Fix SELinux policy module for UserEmailInfo.pl file - Fri Apr 10 2009 Johan Cwiklinski 3.1.0-4 - Fix TopDir change bug 473944 Note that Tenable Network Security has extracted the...

Fedora 10 : jasper-1.900.1-13.fc10 (2009-10737)

Tue Oct 13 2009 Rex Dieter - 1.900.1-13 - CVE-2008-3520 jasper: multiple integer overflows in jasalloc calls 461476 - CVE-2008-3522 jasper: possible buffer overflow in jasstreamprintf 461478 - Fri Jul 24 2009 Fedora Release Engineering - 1.900.1-12 - Rebuilt for...

Fedora 11 : kernel-2.6.30.9-90.fc11 (2009-10639)

Update to kernel 2.6.30.9. Upstream change logs: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.30.9 Also fixes : - Kernel stack randomization bug - NULL dereference in r128 driver - ftrace memory corruption on module unload - boot hanging on some systems - some latency problems caused...

Ubuntu 6.06 LTS : elinks vulnerabilities (USN-851-1)

Teemu Salmela discovered that Elinks did not properly validate input when processing smb:// URLs. If a user were tricked into viewing a malicious website and had smbclient installed, a remote attacker could execute arbitrary code with the privileges of the user invoking the program. CVE-2006-5925...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : poppler vulnerabilities (USN-850-1)

It was discovered that poppler contained multiple security issues when parsing malformed PDF documents. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the progra...

Fedora 10 : Django-1.1.1-1.fc10 (2009-10432)

http://www.djangoproject.com/weblog/2009/oct/09/security/ Description of vulnerability ============================ Django's forms library included field types which perform regular-expression-based validation of email addresses and URLs. Certain addresses/URLs could trigger a pathological...

Solaris 10 (sparc) : 141026-14

SunOS 5.10: print patch. Date this patch was last updated by Sun : Jul/09/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Fedora 11 : deltarpm-3.4-18.fc11 (2009-10262)

deltarpm prior to the current build ships with a bundled copy of zlib. This version of zlib has a known vulnerability with CVE identifier: CVE-2005-1849 This build of deltarpm patches the program to use the system zlib which was fixed when the vulnerability was first discovered instead of the...

NaviCOPA Encoded Space Request Source Code Disclosure

The installed version of the NaviCOPA web server software on the remote host returns the source of scripts hosted on it when '%20' is appended to the request URL. A remote attacker can leverage this issue to view the source code of CGIs and possibly obtain passwords and other sensitive informatio...

Ubuntu 8.04 LTS : pan vulnerability (USN-845-1)

Pavel Polischouk discovered that Pan incorrectly handled certain data structures. If a user were tricked into viewing malicious nntp data, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. Note that Tenable...

Fedora 11 : deltarpm-3.4-17.fc11 (2009-10237)

deltarpm prior to the current build ships with a bundled copy of zlib. This version of zlib has a known vulnerability with CVE identifier: CVE-2005-1849 This build of deltarpm patches the program to use the system zlib which was fixed when the vulnerability was first discovered instead of the...

Ubuntu 8.04 LTS / 8.10 / 9.04 : mimetex vulnerabilities (USN-844-1)

Chris Evans discovered that mimeTeX incorrectly handled certain long tags. An attacker could exploit this with a crafted mimeTeX expression and cause a denial of service or possibly execute arbitrary code. CVE-2009-1382 Chris Evans discovered that mimeTeX contained certain directives that may be...

Fedora 11 : sunbird-1.0-0.7.20090715hg.fc11 / thunderbird-3.0-2.7.b4.fc11 (2009-9911)

The remote Fedora host is missing one or more security updates : sunbird-1.0-0.7.20090715hg.fc11 : - Tue Sep 22 2009 Jan Horak - 1.0-0.7.20090715hg - Sync up with Thunderbird - Tue Aug 18 2009 Lubomir Rintel - 1.0-0.6.20090715hg - Update langpacks - Sun Jun 28 2009 Lubomir Rintel -...

Solaris 10 (sparc) : 120460-21 (deprecated)

GNOME 2.6.0: GNOME libs Patch. Date this patch was last updated by Sun : May/30/13 This plugin has been deprecated and either replaced with individual 120460 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

AIX 610002 : U825632

The remote host is missing AIX PTF U825632 which is related to the security of the package bos.rte.control You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610002 : U828362

The remote host is missing AIX PTF U828362 which is related to the security of the package devices.ide.cdrom.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U825735

The remote host is missing AIX PTF U825735 which is related to the security of the package bos.rte.lvm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...