Fedora 9 : ocsinventory-1.02.1-1.fc9 (2009-5764)

2 Security fixes - CVE-2009-1769 OCS Inventory NG: Authentication result varies for existent and non-existent users - SQL injection and Unauthenticated Arbitrary File Read Some Other minor bug fixes http://www.ocsinventory-ng. org/index.php?mact=News,cntnt01,detail,0&cntnt01articleid=140&cntnt01r...

Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : cron vulnerability (USN-778-1)

It was discovered that cron did not properly check the return code of the setgid and initgroups system calls. A local attacker could use this to escalate group privileges. Please note that cron versions 3.0pl1-64 and later were already patched to address the more serious setuid check referred to ...

Fedora 10 : jetty-5.1.15-3.fc10 (2009-5513)

This bug upgrades jetty to 5.1.15 which addresses CVE-2009-1523. Wed Feb 11 2009 Jeff Johnston 5.1.14-1.10 - Rename jettyc back to .jettyrc. - Resolves 485012 Tue Feb 03 2009 Jeff Johnston 5.1.14-1.9 - Change %%sysconfdir/init.d references to be %%initrddir - Resolves 473585 Mon Feb 02 2009 Jeff...

Microsoft Windows SMB Registry : Vista / Server 2008 Service Pack Detection

It is possible to determine the Service Pack version of the Windows Vista / Server 2008 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38912; scriptversion"1.10";...

Sendmail < 8.13.2 Mail X-Header Handling Remote Overflow

The remote host is running a version of the Sendmail mail server earlier than 8.13.2. Such versions are reportedly affected by a remote buffer overflow vulnerability. An attacker could leverage this flaw to execute arbitrary code with the privileges of the affected application. C Tenable Network...

NSD version Directive Remote Version Disclosure

The remote host is running Name Server Daemon NSD, an open source DNS server. It is possible to extract the version number of the remote installation by sending a special DNS request for the text 'version.bind' in the domain 'chaos'. C Tenable Network Security, Inc. include"compat.inc"; if...

Solaris 10 (x86) : 140566-02

SunOS 5.10x86: kaio patch. Date this patch was last updated by Sun : May/18/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Fedora 9 : ipsec-tools-0.7.2-1.fc9 (2009-4291)

Minor version update from upstream fixing remote DoS. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Solaris 10 (x86) : 140392-03

SunOS 5.10x86: nscd patch. Date this patch was last updated by Sun : Jun/11/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Ubuntu 8.10 / 9.04 : moin vulnerability (USN-774-1)

It was discovered that MoinMoin did not properly sanitize its input when attaching files, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could...

Ubuntu 9.04 : mpfr vulnerability (USN-772-1)

It was discovered that MPFR improperly handled string lengths in its print routines. If a user or automated system were tricked into processing specially crafted data with applications linked against MPFR, an attacker could cause a denial of service or execute arbitrary code with privileges of th...

Microsoft Windows SMB Last Logged On User Disclosure

By connecting to the remote host with the supplied credentials, Nessus was able to identify the username associated with the last successful logon. Microsoft documentation notes that interactive console logons change the DefaultUserName registry entry to be the last logged-on user. C Tenable...

Adobe Acrobat Reader 8.1.2 – 9.0 getIcon() Memory Corruption Exploit

Exploit for unknown platform in category local exploits ==================================================================== Adobe Acrobat Reader 8.1.2 – 9.0 getIcon Memory Corruption Exploit ==================================================================== Affected Version : Acrobat Reader...

Adobe Acrobat Reader 8.1.2 ?9.0 getIcon() Memory Corruption Exploit

No description provided by source. Affected Version : Acrobat Reader 8.1.2 - 9.0 Vendor Patch : http://www.adobe.com/support/security/bulletins/apsb09-04.html Tested On : XP SP2 / SP3 from ZDI : http://www.zerodayinitiative.com/advisories/ZDI-09-014/ This vulnerability allows remote attackers to...

AIX 530007 : U825015

The remote host is missing AIX PTF U825015 which is related to the security of the package bos.altdiskinstall.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530009 : U820016

The remote host is missing AIX PTF U820016 which is related to the security of the package bos.adt.libm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530008 : U822049

The remote host is missing AIX PTF U822049 which is related to the security of the package bos.perf.proctools You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530008 : U822046

The remote host is missing AIX PTF U822046 which is related to the security of the package bos.acct You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530007 : U821381

The remote host is missing AIX PTF U821381 which is related to the security of the package devices.iscsisw.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530009 : U824807

The remote host is missing AIX PTF U824807 which is related to the security of the package devices.pci.00105000.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...