Fedora 10 : kernel-2.6.27.25-170.2.72.fc10 (2009-6883)

Update to linux kernel 2.6.27.25: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27.25 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 11 : moin-1.8.4-1.fc11 (2009-6576)

This package updates Moin to 1.8.4, http://moinmo.in/MoinMoinRelease1.8 has a list of changes. This package includes a security fix for a hierarchical ACL vulnerability hierarchical is not the default ACL mode, http://moinmo.in/SecurityFixes has the details of the fix. Note that Tenable Network...

HTTP Server Cookies Set

HTTP cookies are pieces of information that are presented by web servers and are sent back by the browser. As HTTP is a stateless protocol, cookies are a possible mechanism to keep track of sessions. This plugin displays the list of the HTTP cookies that were set by the web server when it was...

Apache Tomcat Detection

Nessus was able to detect a remote Apache Tomcat web server. NOTE: When paranoia levels are elevated, this plugin will also consider versions obtained from responses with non-200 HTTP status codes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39446;...

Debian DSA-1818-1 : gforge - insufficient input sanitising

Laurent Almeras and Guillaume Smet have discovered a possible SQL injection vulnerability and cross-site scripting vulnerabilities in gforge, a collaborative development tool. Due to insufficient input sanitising, it was possible to inject arbitrary SQL statements and use several parameters to...

ClamAV Version Detection

By sending a 'VERSION' command to the remote clamd antivirus daemon, it is possible to determine the version of the remote ClamAV software installation. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39436; scriptversion"1.16";...

Mac OS X : Java for Mac OS X 10.5 Update 4

The remote Mac OS X 10.5 host is running a version of Java for Mac OS X that is missing Update 4. The remote version of this software contains several security vulnerabilities. A remote attacker could exploit these issues to bypass security restrictions, disclose sensitive information, cause a...

Solaris 10 (sparc) : 140386-04

SunOS 5.10: n2cp driver patch. Date this patch was last updated by Sun : Jul/08/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Fedora 11 : gupnp-0.12.8-1.fc11 (2009-5865)

New upstream release that fixes a bug where the gupnp stack crashes when passed empty content ChangeLog here http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NE WS&id=ce714a6700ce03953a2886a66ec57db59205f4e6 Bug report here http://bugzilla.openedhand.com/showbug.cgi?id=1604 Other bugs fixed here. -...

Fedora 10 : gupnp-0.12.8-1.fc10 (2009-5861)

New upstream release that fixes a bug where the gupnp stack crashes when passed empty content ChangeLog here http://git.gupnp.org/cgit.cgi?url=gupnp/tree/NE WS&id=ce714a6700ce03953a2886a66ec57db59205f4e6 Bug report here http://bugzilla.openedhand.com/showbug.cgi?id=1604 Other bugs fixed here. -...

Solaris 10 (sparc) : 140921-02

SunOS 5.10: c2audit and auditconfig patch. Date this patch was last updated by Sun : Jul/24/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Ubuntu 6.06 LTS : gaim vulnerabilities (USN-781-2)

It was discovered that Gaim did not properly handle certain malformed messages when sending a file using the XMPP protocol handler. If a user were tricked into sending a file, a remote attacker could send a specially crafted response and cause Gaim to crash, or possibly execute arbitrary code wit...

AIX 610002 : U824038

The remote host is missing AIX PTF U824038 which is related to the security of the package bos.rte.tty You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U823957

The remote host is missing AIX PTF U823957 which is related to the security of the package bos.sysmgt.sysbr You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610001 : U825669

The remote host is missing AIX PTF U825669 which is related to the security of the package bos.rte.servaid You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610002 : U824036

The remote host is missing AIX PTF U824036 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

Ubuntu 8.04 LTS / 8.10 / 9.04 : pidgin vulnerabilities (USN-781-1)

It was discovered that Pidgin did not properly handle certain malformed messages when sending a file using the XMPP protocol handler. If a user were tricked into sending a file, a remote attacker could send a specially crafted response and cause Pidgin to crash, or possibly execute arbitrary code...

AIX 610002 : U824074

The remote host is missing AIX PTF U824074 which is related to the security of the package devices.pciex.b3154a63.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610002 : U825583

The remote host is missing AIX PTF U825583 which is related to the security of the package bos.rte.lvm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Fedora 10 : ocsinventory-1.02.1-1.fc10 (2009-5773)

2 Security fixes - CVE-2009-1769 OCS Inventory NG: Authentication result varies for existent and non-existent users - SQL injection and Unauthenticated Arbitrary File Read Some Other minor bug fixes http://www.ocsinventory-ng. org/index.php?mact=News,cntnt01,detail,0&cntnt01articleid=140&cntnt01r...