Fedora 8 : syslog-ng-2.0.7-1.fc8 (2008-0523)

Contains a security fix for CVE-2007-6437/ZSA-2007-029 DoS Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Solaris 5.8 (x86) : 126357-03

Sun Java System Access Manager 7.1 Solarisx86. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.10 (sparc) : 126356-03

Sun Java System Access Manager 7.1 Solaris. Date this patch was last updated by Sun : Jun/19/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 125251-02

SunOS 5.10: libdevinfo patch. Date this patch was last updated by Sun : Jan/10/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxfont, xorg-server vulnerabilities (USN-571-1)

Multiple overflows were discovered in the XFree86-Misc, XInput-Misc, TOG-CUP, EVI, and MIT-SHM extensions which did not correctly validate function arguments. An authenticated attacker could send specially crafted requests and gain root privileges. CVE-2007-5760, CVE-2007-6427, CVE-2007-6428,...

QuickTime < 7.4 Multiple Vulnerabilities (Mac OS X)

The version of QuickTime installed on the remote Mac OS X host is older than 7.4. Such versions contain several vulnerabilities that may allow an attacker to execute arbitrary code on the remote host if he can trick the user to open a specially crafted movie or PICT file file with QuickTime. C...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libxml2 vulnerability (USN-569-1)

Brad Fitzpatrick discovered that libxml2 did not correctly handle certain UTF-8 sequences. If a remote attacker were able to trick a user or automated system into processing a specially crafted XML document, the application linked against libxml2 could enter an infinite loop, leading to a denial ...

Fedora 8 : drupal-5.6-1.fc8 (2008-0485)

Update to 5.6, security fixes : DRUPAL-SA-2008-005 DRUPAL-SA-2008-006 DRUPAL-SA-2008-007 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network...

Ubuntu 7.04 / 7.10 : dovecot vulnerability (USN-567-1)

It was discovered that in very rare configurations using LDAP, Dovecot may reuse cached connections for users with the same password. As a result, a user may be able to login as another if the connection is reused. The default Ubuntu configuration of Dovecot was not vulnerable. Note that Tenable...

Fedora 8 : postgresql-8.2.6-1.fc8 (2008-0478)

Mon Jan 7 2008 Tom Lane 8.2.6-1 - Update to PostgreSQL 8.2.6 to fix CVE-2007-4769, CVE-2007-4772, CVE-2007-6067, CVE-2007-6600, CVE-2007-6601 - Make initscript and pam config files be installed unconditionally; seems new buildroots don't necessarily have those directories in place Note that...

Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : libcdio-0.78.2-4.fc7 (2008-0104)

Wed Jan 2 2008 Adrian Reber - 0.78.2-4 - fixes 427197 Long Joliet file name overflows cdio's buffer - Fri Aug 24 2007 Adrian Reber - 0.78.2-3 - rebuilt - Mon Jul 23 2007 Adrian Reber - 0.78.2-2 - updated to 0.78.2 221359 this time for real - Thu Jan 4 2007 Adrian Reber - 0.78.2-1 - updated to...

Opera < 9.25 Multiple Vulnerabilities

The version of Opera installed on the remote host reportedly is affected by several issues, including one in which TLS certificates could be used to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29742; scriptversion"1.18"; scriptcveid...

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability

ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-079.html December 17, 2007 -- CVE ID: CVE-2007-6195 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP-UX 11.11 -- TippingPointTM IPS Customer Protection:...

Fedora 8 : squid-2.6.STABLE17-1.fc8 (2007-4170)

Thu Dec 6 2007 Martin Nagy - 2.6.STABLE17-1 - upgrade to latest upstream 2.6.STABLE17 - Mon Nov 12 2007 Martin Bacovsky - 7:2.6.STABLE16-3 - squid is compiled wirh arp acls support --enable-arp-acl Note that Tenable Network Security has extracted the preceding description block directly from the...

AIX 610000 : U813934

The remote host is missing AIX PTF U813934 which is related to the security of the package bos.perf.tools You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610000 : U813954

The remote host is missing AIX PTF U813954 which is related to the security of the package bos.rte.libc You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 4249)

This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 / CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability

ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-076.html December 11, 2007 -- CVE ID: CVE-2007-3039 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 -- TippingPointTM IPS...

Fedora 7 : seamonkey-1.1.7-1.fc7 (2007-4106)

Sun Dec 2 2007 Kai Engert - 1.1.7-1 - SeaMonkey 1.1.7 - Mon Nov 5 2007 Kai Engert - 1.1.6-1 - SeaMonkey 1.1.6 - Fri Oct 19 2007 Kai Engert - 1.1.5-1 - SeaMonkey 1.1.5 - Fri Jul 27 2007 Martin Stransky - 1.1.3-2 - added pango patches - Fri Jul 20 2007 Kai Engert - 1.1.3-1 - SeaMonkey 1.1.3 - Thu...