WordPress index.php 'cat' Parameter Local File Inclusion

The version of WordPress installed on the remote host fails to sanitize user input to the 'cat' parameter of the 'index.php' script. Regardless of PHP's 'registerglobals' setting, an unauthenticated attacker can exploit this issue to view arbitrary files or to execute arbitrary PHP code on the...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : firefox vulnerabilities (USN-602-1)

Flaws were discovered in Firefox which could lead to crashes during JavaScript garbage collection. If a user were tricked into opening a malicious web page, an attacker may be able to crash the browser or possibly execute arbitrary code with the user's privileges. CVE-2008-1380. Note that Tenable...

Fedora 8 : fedora-ds-admin-1.1.4-1.fc8 (2008-3220)

This release addresses two security vulerabilities in the package: - shell command injection in CGI replication monitor CVE-2008-0892 - unrestricted access to CGI scripts CVE-2008-0893 Fix Description: Remove ScriptAlias for bin/admin/admin/bin - do not use that directory for CGI URIs - use only...

Fedora 8 : Miro-1.2-2.fc8 / chmsee-1.0.0-2.30.fc8 / devhelp-0.16.1-7.fc8 / epiphany-2.20.3-3.fc8 / etc (2008-3283)

Mozilla Firefox is an open source Web browser. A flaw was found in the processing of malformed JavaScript content. A web page containing such malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2008-1380 All Firefox users should...

Fedora 8 : nagios-plugins-1.4.11-2.fc8 (2008-3061)

Upstream released a new version. This also fixes CVE-2007-5198 315101. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : gallery2-2.2.4-3.fc8 (2008-2650)

Thu Mar 20 2008 John Berninger - 2.2.4-3 - revert to SVN snapshot so that config-time integrity checks don't fail - remove embedded copy of smarty and use php-Smarty package - Sat Dec 29 2007 John Berninger 2.2.4-1 - A christmas present -- critical security update to 2.2.4 Note that Tenable...

AIX 610000 : U816204

The remote host is missing AIX PTF U816204 which is related to the security of the package bos.rte.libpthreads You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Fedora 8 : wireshark-1.0.0-1.fc8 (2008-3040)

Upgrade to 1.0.0 fixes several security flaws wireshark crashes, see BZ references. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31798;...

Fedora 8 : mod_suphp-0.6.3-1.fc8 (2008-2868)

This update is a security update fixing two local privilege escalation problems. modsuphp 0.6.2 contains two race condition regarding symlink checks. Using this attack vector a local attacker has the ability of changing symlinks in the timeframe between the security check and the php execution...

Fedora 7 : centerim-4.22.4-1.fc7.1 (2008-2869)

This update fixes the CVE-2008-1467 security issue by disabling the 'actions' configuration altogether. Furthermore the default web browser is no longer configurable in CenterIM. The links get open in the default web browser configured, using xdg-utils. There won't be any update for centericq. Al...

Fedora 7 : Miro-1.1.2-2.fc7 / chmsee-1.0.0-1.30.fc7 / devhelp-0.13-15.fc7 / epiphany-2.18.3-8.fc7 / etc (2008-2662)

Mozilla Firefox is an open source Web browser. Several flaws were found in the processing of some malformed web content. A web page containing such malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2008-1233, CVE-2008-1235,...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : sdl-image1.2 vulnerabilities (USN-595-1)

Michael Skladnikiewicz discovered that SDLimage did not correctly load GIF images. If a user or automated system were tricked into processing a specially crafted GIF, a remote attacker could execute arbitrary code or cause a crash, leading to a denial of service. CVE-2007-6697 David Raulo...

Orb Detection

Orb is installed on the remote Windows host. Orb is a peer-to- peer file sharing application for 'mycasting' digital content from a PC. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31651; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 7 : asterisk-1.4.18.1-1.fc7 (2008-2620)

Update to 1.4.18.1 plus another patch to fix some security issues. AST-2008-002 details two buffer overflows that were discovered in RTP codec payload type handling. http://downloads.digium.com/pub/security/AST-2008-002.pdf All users of SIP in Asterisk 1.4 and 1.6 are affected. AST-2008-003 detai...

Microsoft IIS webhits.dll Hit-Highlighting Authentication Bypass

The remote IIS web server contains a vulnerability in the Server Hit Hilight Module which may allow an attacker to view the contents of a page otherwise requiring authentication. An attacker may exploit this flaw to bypass authentication on certain pages. C Tenable Network Security, Inc...

Apache mod_imap Image Map Referer XSS

The remote Apache web server has the module 'modimap' or 'modimagemap' installed. The remote version of this module is vulnerable to a cross-site scripting issue related to the handling of the 'referrer' field of the remote server. C Tenable Network Security, Inc. include"compat.inc"; ifdescripti...

AIX 530007 : U815864

The remote host is missing AIX PTF U815864 which is related to the security of the package bos.net.nfs.adt You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Fedora 8 : roundup-1.4.4-1.fc8 (2008-2471)

Fri Mar 7 2008 Paul P. Komkoff Jr - 1.4.4-1 - new upstream version with security fixes bz436546 - Wed Feb 20 2008 Paul P. Komkoff Jr - 1.4.1-2 - new upstream version - Wed Jan 23 2008 Paul P. Komkoff Jr - 1.4.1-1 - new upstream version Note that Tenable Network Security has extracted the...

Fedora 7 : pcre-7.3-3.fc7 (2008-1842)

This update re-based pcre to version 7.3 as used in Fedora 8 to address multiple security issues that cause memory corruption, leading to application crash or possible execution of arbitrary code. CVE-2007-1659 315871, CVE-2007-1661 392931, CVE-2007-1662 392921, CVE-2007-4766 392891, CVE-2007-476...