CentOS 4 : nfs-utils-lib (CESA-2007:0913)

An updated nfs-utils-lib package to correct a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contains support libraries that are needed by the commands a...

Important: Red Hat Security Advisory: nfs-utils-lib security update

An updated nfs-utils-lib package to correct a security flaw is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contains support libraries that are needed by the commands a...

ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability

ZDI-07-052: Multiple Kerberos Implementations Authentication Context Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-052.html September 12, 2007 -- CVE ID: CVE-2007-3999 -- Affected Vendor: MIT -- Affected Products: MIT Kerberos krb5-1.6.2 -- TippingPointTM IPS...

MS07-053: Vulnerability in Windows Services for UNIX Could Allow Elevation of Privilege (939778)

The remote host is running a version of the Windows Services for UNIX that is vulnerable to a local privileges elevation due to a flaw in different setuid binary files. An attacker may use this to elevate his privileges on this host. Tenable Network Security, Inc. include"compat.inc"; if...

Fedora Core 6 : kernel-2.6.22.4-45.fc6 (2007-679)

Update to linux 2.6.22.3 and 2.6.22.4: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.22.4 CVE-2007-3848: Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is runnin...

Fedora Core 6 : fetchmail-6.3.6-3.fc6 (2007-689)

Mon Sep 3 2007 Vitezslav Crhonek - 6.3.6-3 - Fix license - Fix fetchmail NULL pointer dereference CVE-2007-4565 Resolves: 260881 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...

Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix two security flaws are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 07 Sep 2007 The initial fix for CVE-2007-3999 was found to be incomplete. Packages have...

Fedora Core 6 : rpm-4.4.2.1-1.fc6 (2007-668)

Summary of changes : - update to 4.4.2.1 fixing 247749 and countless others - avoid unnecessary .rpmsave / .rpmnew files 29470, 128622 - stricter docdir checking 246819 - allow checking for pending signals from python 181434 - add hook to python for cleaning up on unclean exit 245389 - resurrect...

Cisco VPN Client on Windows Dial-up Networking Dialog Local Privilege Escalation

The version of the Cisco VPN client installed on the remote host reportedly allows an unprivileged local user to elevate his privileges to the LocalSystem account by enabling the 'Start Before Login' feature and configuring a VPN profile to use Microsoft's Dial-Up Networking interface. C Tenable...

Fedora Core 6 : libgtop2-2.14.9-1.fc6 (2007-657)

Thu Aug 2 2007 Soren Sandmann - 2.14.9-1 - BuildRequire gtk-doc, package documentation files in devel package - Thu Aug 2 2007 Soren Sandmann - 2.14.9-1 - Update to libgtop-2.14.9 for b.r.c 222637 CVE-2007-0235 Note that Tenable Network Security has extracted the preceding description block...

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability

ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-044.html July 25, 2007 -- CVE ID: CVE-2007-3911 -- Affected Vendor: BakBone -- Affected Products: BakBone NetVault Reporter 3.5 Update4 -- TippingPointTM IPS Customer...

JVN#34058672 Nessus report function vulnerable to arbitrary script execution

Nessus, a vulnerability scanner from Tenable Network Security, Inc., is capable of providing test reports in HTML format. The report in HTML format contains the target server's responses against Nessus scanning. Nessus fails to properly handle the responses. This may cause a script to be executed...

Solaris 10 (sparc) : 121132-03

SunOS 5.10: cryptmod patch. Date this patch was last updated by Sun : Jul/05/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Fedora Core 6 : wireshark-0.99.6-1.fc6 (2007-628)

Upgrade to 0.99.6 due to multiple security issues. - Wireshark could crash when dissecting an HTTP chunked response - Wireshark could crash while reading iSeries capture files - Wireshark could exhaust system memory while reading a malformed DCP ETSI packet - Wireshark could loop excessively whil...

LDAP Crafted Search Request Server Information Disclosure

By sending a search request with a filter set to 'objectClass=', it is possible to extract information about the remote LDAP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid25701; scriptversion"1.25";...

Fedora Core 5 : perl-Net-DNS-0.60-1.fc5 (2007-612)

This brings FC-5 up to date with the latest changes to Net::DNS. See the project page here : http://search.cpan.org/olaf/Net-DNS-0.60/ The change for this upstream issue is included : http://rt.cpan.org/Public/Bug/Display.html?id=23961 Since this fix has security implications making DNS spoofing...

HP Instant Support Driver Check HPSDDX Class (SDD) ActiveX (sdd.dll) queryHub Function Overflow

The remote host contains the SDD ActiveX control, a part of HP Instant Support. The version of this control on the remote host is reportedly affected by a buffer overflow that can be triggered by a long argument to its 'queryHub' method. If an attacker can trick a user on the affected host into...

Solaris 9 (sparc) : 114356-19

SunOS 5.9: /usr/bin/ssh patch. Date this patch was last updated by Sun : Sep/16/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 123325-03

SunOS 5.10x86: sshd patch. Date this patch was last updated by Sun : Jun/21/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...