AIX 5.1 : IY46255

The remote host is missing AIX Critical Security Patch number IY46255 SECURITY: Format string vulnerability in /usr/bin/enq and. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 5.2 : IY45453

The remote host is missing AIX Critical Security Patch number IY45453 LoadLstartd hangs when canceling process scope thread. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 5.2 : IY43806

The remote host is missing AIX Critical Security Patch number IY43806 Data corruption while building large database. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 5.2 : IY45740

The remote host is missing AIX Critical Security Patch number IY45740 Point markers disappear in CATIA. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.1 : IY37069

The remote host is missing AIX Critical Security Patch number IY37069 SECURITY: Inadequate validation in IPsec packets. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 5.2 : IY48638

The remote host is missing AIX Critical Security Patch number IY48638 find -mtime does not select all applicable files. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 5.1 : IY49747

The remote host is missing AIX Critical Security Patch number IY49747 Fibre Channel adatper driver hang. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.2 : IY50452

The remote host is missing AIX Critical Security Patch number IY50452 lqueryvg can fail for Bigvg. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.1 : IY53673

The remote host is missing AIX Critical Security Patch number IY53673 SECURITY: Buffer overflow in X-Windows font library. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

FreeBSD : qt -- image loader vulnerabilities (ebffe27a-f48c-11d8-9837-000c41e2cdad)

Qt contains several vulnerabilities related to image loading, including possible crashes when loading corrupt GIF, BMP, or JPEG images. Most seriously, Chris Evans reports that the BMP crash is actually due to a heap buffer overflow. It is believed that an attacker may be able to construct a BMP...

FreeBSD : fidogate -- write files as `news' user (49)

The following package needs to be updated: fidogate-ds %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3243e839f48911d89837000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : mysql -- mysqlhotcopy insecure temporary file creation (125)

The following package needs to be updated: mysql-scripts %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg0c4d5973f2ab11d89837000c41e2cdad.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Opera < 7.24 getElementsByTagName JavaScript Method DoS

The version of Opera installed on the remote host is vulnerable to a remote denial of service. An attacker may cause the browser to crash by crafting a rogue HTML page containing a specific JavaScript command. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid14336;...

Fedora Core 2 : rsync-2.6.2-1.fc2.0 (2004-269)

This update backports a security fix to a path-sanitizing flaw that affects rsync when it is used in daemon mode without also using chroot. For more information see http://samba.org/rsync/securityaug04 Note that Tenable Network Security has extracted the preceding description block directly from...

FreeBSD Xonix vulnerability

The remote host is running an older version of Xonix. Xonix is a game. This version of Xonix calls an external program while retaining setgid privileges. An attacker, exploiting this flaw, would need local access. A successful attack would give the attacker the privileges of the 'games' group...

FreeBSD : tnftpd -- remotely exploitable vulnerability (194)

The following package needs to be updated: tnftpd %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc4b025bbf05d11d89837000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

CVSTrac cgi.c Multiple Overflows

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains multiple flaws in the mprintf, vmprintf, and vxprintf functions in cgi.c . A remote attacker, exploiting this flaw, would be able to execute arbitrary code on the remote syste...

FreeBSD : Arbitrary code execution via a format string vulnerability in jftpgw (82)

The following package needs to be updated: jftpgw %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg65a17a3fed6e11d8aff100061bc2ad93.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD : popfile file disclosure (152)

The following package needs to be updated: popfile %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg12c7b7aeec9011d8b913000c41e2cdad.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

WebCam Watchdog sresult.exe XSS

The remote host is running WebCamSoft's watchdog software. There is a CGI script included in this software suite 'sresult.exe' that fails to sanitize user-supplied input to the 'cam' parameter before using it to generate dynamic output. An attacker may exploit this issue to steal cookie-based...