AIX 610002 : U828339

The remote host is missing AIX PTF U828339 which is related to the security of the package bos.adt.base You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610002 : U828321

The remote host is missing AIX PTF U828321 which is related to the security of the package bos.perf.proctools You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U825737

The remote host is missing AIX PTF U825737 which is related to the security of the package bos.rte.shell You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610002 : U825619

The remote host is missing AIX PTF U825619 which is related to the security of the package bos.acct You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Fedora 11 : rubygem-actionpack-2.3.3-2.fc11 / rubygem-activesupport-2.3.3-2.fc11 (2009-9922)

A vulnerability is found on Ruby on Rails in the escaping code for the form helpers, which also affects the rpms shipped in Fedora Project. Attackers who can inject deliberately malformed unicode strings into the form helpers can defeat the escaping checks and inject arbitrary HTML. This issue ha...

Fedora 10 : rubygem-actionpack-2.1.1-3.fc10 / rubygem-activesupport-2.1.1-2.fc10 (2009-9799)

A vulnerability is found on Ruby on Rails in the escaping code for the form helpers, which also affects the rpms shipped in Fedora Project. Attackers who can inject deliberately malformed unicode strings into the form helpers can defeat the escaping checks and inject arbitrary HTML. This issue ha...

Ubuntu 8.10 / 9.04 : webkit vulnerabilities (USN-836-1)

It was discovered that WebKit did not properly handle certain SVGPathList data structures. If a user were tricked into viewing a malicious website, an attacker could exploit this to execute arbitrary code with the privileges of the user invoking the program. CVE-2009-0945 Several flaws were...

iTunes < 9.0.1 PLS File Buffer Overflow (Mac OS X)

The remote version of iTunes is older than 9.0.1. Such versions are affected by a buffer overflow involving the handling of PLS files. If an attacker can trick a user on the affected host into opening a malicious PLS file, he can leverage this issue to crash the affected application or to execute...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : postgresql-8.1, postgresql-8.3 vulnerabilities (USN-834-1)

It was discovered that PostgreSQL could be made to unload and reload an already loaded module by using the LOAD command. A remote authenticated attacker could exploit this to cause a denial of service. This issue did not affect Ubuntu 6.06 LTS. CVE-2009-3229 Due to an incomplete fix for...

Fedora 11 : drupal-6.14-1.fc11 (2009-9721)

Fixes SA-CORE-2009-008 http://drupal.org/node/579482 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Multiple vulnerabilities and weaknesses were discovered in Drupal...

Ubuntu 8.04 LTS / 8.10 / 9.04 : kde4libs, kdelibs vulnerability (USN-833-1)

It was discovered that KDE did not properly handle certificates with NULL characters in the Subject Alternative Name field of X.509 certificates. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : openssl vulnerability (USN-830-1)

Dan Kaminsky discovered OpenSSL would still accept certificates with MD2 hash signatures. As a result, an attacker could potentially create a malicious trusted certificate to impersonate another site. This update handles this issue by completely disabling MD2 for certificate validation. Note that...

MS09-050: Microsoft Windows SMB2 _Smb2ValidateProviderCallback() Vulnerability (975497) (EDUCATEDSCHOLAR) (uncredentialed check)

The remote host is running a version of Microsoft Windows Vista or Windows Server 2008 that contains a vulnerability in its SMBv2 implementation. An attacker can exploit this flaw to disable the remote host or to execute arbitrary code on it. EDUCATEDSCHOLAR is one of multiple Equation Group...

Citrix Licensing Service Detection

The remote host is running Citrix Licensing Service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40876; scriptversion"1.7"; scriptnameenglish:"Citrix Licensing Service Detection"; scriptsummaryenglish:"Checks for Citrix Licensing Service"; scriptsetattribute...

Fedora 10 : xemacs-21.5.28-10.fc10 (2009-8997)

This update fixes multiple buffer overflows when reading large image files, or maliciously created image files whose headers misrepresent the actual image size. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 11 : httpd-2.2.13-1.fc11 (2009-8812)

This update includes the latest release of the Apache HTTP Server, version 2.2.13, fixing several security issues: Fix a potential Denial-of-Service attack against moddeflate or other modules, by forcing the server to consume CPU time in compressing a large file after a client disconnects...

Fedora 10 : firebird-2.1.3.18185.0-2.fc10 (2009-8317)

Upgrade from previous package version may be a problem since previous version remove /var/run/firebird and it shouldn't This release fix this problem for future updates If you are in that case no longer /var/run/firebird directory after upgrade, just reinstall firebird-2.1.3.18185.0-2 package or...

Adobe Acrobat Detection

Adobe Acrobat, a PDF file creation and editing tool, is installed on the remote Windows host. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid40797; scriptversion"1.38"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/08/17"; scriptxrefname:"IAVT"...

Fedora 11 : kernel-2.6.29.6-217.2.16.fc11 (2009-9044)

Security fixes: - CVE-2009-2691: Information disclosure in proc filesystem - CVE-2009-2848: execve: must clear current-childtid - CVE-2009-2849: md: NULL pointer dereference - CVE-2009-2847: Information leak in dosigaltstack Restore missing LIRC drivers, dropped in previous release. Backport...

Fedora 10 : dhcp-4.0.0-37.fc10 (2009-8344)

This update to the dhcp package includes fixes for CVE-2009-0692 and CVE-2009-1892. More information on these issues are available here: https://vulners.com/cve/CVE-2009-0692 https://vulners.com/cve/CVE-2009-1892 Note: CVE-2009-0692 had no security consequences on Fedora, thanks to the use of...