Fedora Core 3 : xorg-x11-6.8.2-1.FC3.45 (2005-893)

Updated xorg-x11 packages that fix several integer overflows, various bugs, are now available for Fedora Core 3. X.Org X11 is an implementation of the X Window System, which provides the core functionality for the Linux graphical desktop. Several integer overflow bugs were found in the way X.Org...

Fedora Core 3 : httpd-2.0.53-3.3 (2005-848)

This update includes two security fixes. An issue was discovered in modssl where 'SSLVerifyClient require' would not be honoured in location context if the virtual host had 'SSLVerifyClient optional' configured CVE-2005-2700. An issue was discovered in memory consumption of the byterange filter f...

Fedora Core 3 : ImageMagick-6.2.0.7-2.fc3 (2005-235)

Andrei Nigmatulin discovered a heap based buffer overflow flaw in the ImageMagick image handler. An attacker could create a carefully crafted Photoshop Document PSD image in such a way that it would cause ImageMagick to execute arbitrary code when processing the image. The Common Vulnerabilities...

Fedora Core 4 : php-5.0.4-10.4 (2005-810)

This update includes the latest upstream version of the PEAR XMLRPC package, which fixes a security issue in request parsing in the XMLRPC Server code. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2005-2498 to this issue. Note that Tenable Network...

Fedora Core 3 : php-4.3.11-2.7 (2005-809)

This update includes the latest upstream version of the PEAR XMLRPC package, which fixes a security issue in request parsing in the XMLRPC Server code. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name CVE-2005-2498 to this issue. Note that Tenable Network...

Fedora Core 3 : gdk-pixbuf-0.22.0-16.fc3 (2005-266)

David Costanzo found a bug in the way gdk-pixbuf processes BMP images. It is possible that a specially crafted BMP image could cause a denial of service attack in applications linked against gdk-pixbuf. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the name...

CiscoWorks Management Console Detection

The remote host appears to be running CiscoWorks, a LAN Management solution, on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid19559; scriptversion"1.12"; scriptnameenglish:"CiscoWorks Management Console Detection"; scriptsummaryenglish:"Checks for...

Fedora Core 4 : squirrelmail-1.4.6-0.cvs20050812.1.fc4 (2005-780)

It probably is not a good idea to push a CVS snapshot here, but upstream screwed up their 1.4.5 release and CVS contains further fixes like PHP5 related stuff that might make squirrelmail usable on FC4. This snapshot worked on my personal server for the past week, so hopefully it will be good for...

Fedora Core 3 : kdeedu-3.4.2-0.fc3.2 (2005-745)

Ben Burton notified the KDE security team about several tempfile handling related vulnerabilities in langen2kvtml, a conversion script for kvoctrain. The script must be manually invoked. The script uses known filenames in /tmp which allow an local attacker to overwrite files writeable by the user...

Solaris 10 (x86) : 120295-01

SunOS 5.10x86 : mysql man patch. Date this patch was last updated by Sun : Aug/04/05 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

VERITAS Backup Exec Remote Agent Static Password Arbitrary File Download

The remote host is running a version of VERITAS Backup Exec Agent which is configured with a default root account. An attacker may exploit this flaw to retrieve files from the remote host. C Tenable Network Security, Inc. Credit for the default root account values: - Metsaploit and an anonymous...

MS05-040: Vulnerability in Telephony Service Could Allow Remote Code Execution (893756)

The remote host contains a version of the Telephony service that is vulnerable to a security flaw that could allow an attacker to execute arbitrary code and take control of the remote host. On Windows 2000 and Windows 2003 the server must be enabled and only authenticated user can try to exploit...

Fedora Core 4 : NetworkManager-0.4-20.FC4.1 (2005-680)

Network Manager passes logging messages straight to syslog as the format string. This causes it to crash when connecting to access points that contain format string characters. This was reported initially by Ian Jackson : http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00196. html...

Fedora Core 3 : perl-5.8.5-14.FC3 (2005-600)

Paul Szabo discovered another vulnerability in the File::Path::rmtree function of perl, the popular scripting language. When a process is deleting a directory tree, a different user could exploit a race condition to create setuid binaries in this directory tree, provided that he already had write...

Fedora Core 4 : epiphany-1.6.3-2 (2005-620)

Epiphany is a simple GNOME web browser based on the Mozilla rendering engine. There were several security flaws found in the mozilla package, which epiphany depends on. Users of epiphany are advised to upgrade to this updated package which has been rebuilt against a version of mozilla not...

Fedora Core 4 : fetchmail-6.2.5-7.fc4.1 (2005-613)

A buffer overflow was discovered in fetchmail's POP3 client. A malicious server could cause fetchmail to execute arbitrary code. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2355 to this issue. All fetchmail users should upgrade to the updated package, which fix...

Fedora Core 3 : kdelibs-3.3.1-2.14.FC3 (2005-594)

A flaw was discovered affecting Kate, the KDE advanced text editor, and Kwrite. Depending on system settings it may be possible for a local user to read the backup files created by Kate or Kwrite. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-1920 to this issue. User...

Solaris 10 (sparc) : 118560-02

SunOS 5.10: usr/bin/telnet patch. Date this patch was last updated by Sun : Sep/14/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Fedora Core 4 : rpm-4.4.1-22 (2005-565)

This update corrects security problem CVE-2005-2096. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Microsoft Windows SMB Service Enumeration via \srvsvc

This plugin connects to \srvsvc instead of \svcctl to enumerate the list of services running on the remote host on top of a NULL session. An attacker may use this feature to gain better knowledge of the remote host. C Tenable Network Security, Inc. Thanks to: Jean-Baptiste Marchand of Herve Schau...