Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : openssl-blacklist update (USN-612-8)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by introducing openssl-blacklist to aid in detecting vulnerable private keys. This update enhances the openssl-vulnkey tool to check X.509 certificates as well, and provides the corresponding update for Ubuntu 6.0...

Ubuntu 6.06 LTS : openssh update (USN-612-7)

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems tha...

MDAP Service Detection

The remote service supports the Multi Directory Access Protocol MDAP, which is used to multicast commands to certain types of network devices, such as Thompson ADSL modems. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32399; scriptversion"1.7"; scriptcvsdate"Date:...

Fedora 9 : mt-daapd-0.2.4.2-2.fc9 (2008-4126)

Thu May 15 2008 W. Michael Petullo - 0.2.4.2-2 - Bump epoch. - Wed May 14 2008 W. Michael Petullo - 0.2.4.2-1 - New upstream version. - Remove check-input patch; it's upstream. - Fri Apr 18 2008 W. Michael Petullo - 0.9-0.2.1696 - Apply patch by Nico Golde to fix integer overflow, Bugzilla...

Fedora 7 : kernel-2.6.23.17-88.fc7 (2008-4043)

Update to Linux kernel version 2.6.23.17: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.16 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23.17 Additionally, following security fixes were backported: CVE-2008-1669 - SMP ordering hole in fcntlsetlk CVE-2008-1615 -...

Fake SMTP/FTP Server Detection (possible backdoor)

Although this service answers with 3 digit ASCII codes like FTP, SMTP or NNTP servers, it sends back different codes when several NOOP commands are sent in a row. This is probably a backdoor; in this case, your system is compromised and an attacker can control it remotely. C Tenable Network...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)

Matt Zimmerman discovered that entries in /.ssh/authorizedkeys with options such as 'no-port-forwarding' or forced commands were ignored by the new ssh-vulnkey tool introduced in OpenSSH see USN-612-2. This could cause some compromised keys not to be listed in ssh-vulnkey's output. This update al...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn vulnerability (USN-612-3)

A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...

Fedora 7 : libvorbis-1.1.2-4.fc7 (2008-3898)

Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...

Solaris 10 (sparc) : 127959-02

SunOS 5.10: rpcsec patch. Date this patch was last updated by Sun : Jul/15/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 127960-02

SunOS 5.10x86: rpcsec patch. Date this patch was last updated by Sun : Jul/15/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : mozilla-thunderbird, thunderbird vulnerabilities (USN-605-1)

Various flaws were discovered in the JavaScript engine. If a user had JavaScript enabled and were tricked into opening a malicious email, an attacker could escalate privileges within Thunderbird, perform cross-site scripting attacks and/or execute arbitrary code with the user's privileges...

Solaris 10 (x86) : 128329-01

SunOS 5.10x86: usbms patch. Date this patch was last updated by Sun : Apr/18/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 128328-01

SunOS 5.10: usbms patch. Date this patch was last updated by Sun : Apr/18/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Ubuntu 6.06 LTS / 7.04 / 7.10 : cupsys vulnerability (USN-606-1)

Thomas Pollet discovered that CUPS did not properly validate the size of PNG images. A local attacker, and a remote attacker if printer sharing is enabled, could send a crafted file and cause a denial of service or possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS and 7.04. ...

Solaris 10 (x86) : 128295-02

SunOS 5.10x86: rpcmod patch. Date this patch was last updated by Sun : Apr/18/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : emacs21, emacs22 vulnerabilities (USN-607-1)

It was discovered that Emacs did not account for precision when formatting integers. If a user were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly other unspecified actions. This issue does not affect Ubuntu 8.04. CVE-2007-6109 Steve Grubb...

Asterisk IAX2 Multiple Method Handshake Spoofing DoS

The version of Asterisk running on the remote host does not properly validate an IAX2 handshake. By spoofing NEW and ACK messages, an unauthenticated, remote attacker may be able to leverage this issue to flood a third-party host with packets from the affected host containing audio data. C Tenabl...

Cisco Security Agent Detection

Cisco Security Agent, an endpoint security application system is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid32130; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Fedora 7 : clamav-0.92.1-2.fc7 (2008-3358)

Security update - backport security fixes from 0.93: CVE-2008-1100 442360: Upack Processing Buffer Overflow Vulnerability CVE-2008-1387 442525: Endless loop / hang with crafted arj CVE-2008-0314 442740: PeSpin Heap Overflow Vulnerability CVE-2008-1833 442741: PE WWPack Heap Overflow Vulnerability...