Tenable Nessus 6.10.x < 6.10.5 Multiple Vulnerabilities

Tenable Nessus is prone to multiple vulnerabilities when running in agent mode. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora 24 : php-onelogin-php-saml (2017-68cdc567e9)

Update to 2.10.5 ---- Update to 2.10.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...

SUSE SLES12 Security Update : ntp (SUSE-SU-2017:1047-1)

This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed bsc1030050 : - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock -...

Tenable Appliance < 4.5 - Unauthenticated Remote Root Code Execution Exploit

Exploit for linux platform in category remote exploits !/bin/bash : ' According to http://static.tenable.com/proddocs/upgradeappliance.html they fixed two security vulnerabilities in the web interface in release 4.5 so I guess previous version are also vulnerable. Exploit Title: Unauthenticated...

Oracle Linux 6 : libreoffice (ELSA-2017-0979)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0979 advisory. 1:4.3.7.2-2.0.1.1 - Replaced RedHat colors with Oracle colors, and the filename redhat.soc with oracle.soc in specfile [email protected] - Build with...

Tenable Appliance 4.5 - Root Remote Code Execution

Tenable Appliance 4.5 - Root Remote Code Execution !/bin/bash : ' According to http://static.tenable.com/proddocs/upgradeappliance.html they fixed two security vulnerabilities in the web interface in release 4.5 so I guess previous version are also vulnerable. Exploit Title: Unauthenticated remot...

Tenable Nessus 6.8.x < 6.10.2 Arbitrary File Upload (TNS-2017-06)

According to its self-reported version, the Tenable Nessus application running on the remote host is 6.8.x, 6.9.x, or 6.10.x prior to 6.10.2. It is, therefore, affected by an arbitrary file upload vulnerability due to an unspecified flaw. An authenticated, remote attacker can exploit this to uplo...

Tenable Appliance < 4.5 - Root Remote Code Execution

!/bin/bash : ' According to http://static.tenable.com/proddocs/upgradeappliance.html they fixed two security vulnerabilities in the web interface in release 4.5 so I guess previous version are also vulnerable. Exploit Title: Unauthenticated remote root code execution on Tenable Appliance Date:...

Fedora 25 : 1:xrdp / xorgxrdp (2017-7bd002b77c)

New upstream version of xorgxrdp and xrdp : New features in xrdp : - RemoteFX codec support is now enabled by default. - Bitmap updates support is now enabled by default. - TLS ciphers suites and version is now logged. - Connected computer name is now logged. - Switched to Xorg xorgxrdp as the...

Debian DLA-895-1 : openoffice.org-dictionaries update

The dictionaries provided by this package had an unversioned conflict against the thunderbird package which so far was not part of wheezy. Since the next update of Icedove introduces a thunderbird package the dictionaries would become unusable in Icedove so the unneeded conflict was dropped. For...

Fedora 25 : libtiff (2017-021bebae25)

Security fix for : - CVE-2017-7592 - CVE-2017-7593 - CVE-2017-7594 - CVE-2017-7595 - CVE-2017-7596 - CVE-2017-7597 - CVE-2017-7598 - CVE-2017-7599 - CVE-2017-7600 - CVE-2017-7601 - CVE-2017-7602 Note that Tenable Network Security has extracted the preceding description block directly from the...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3539)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2017-3539 advisory. - KVM: x86: fix emulation of 'MOV SS, null selector' Paolo Bonzini Orabug: 25719659 CVE-2017-2583 CVE-2017-2583 - ext4: store checksum seed in...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3537)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-3537 advisory. kernel-uek 3.8.13-118.17.5 - block: fix use-after-free in seq file Vegard Nossum Orabug: 25877530 CVE-2016-7910 Tenable has extracted the preceding...

Microsoft .NET Security Rollup Enumeration

Nessus was able to enumerate the Microsoft .NET security rollups installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid99364; scriptversion"1.62"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/08/28";...

Oracle Linux 7 : libreoffice (ELSA-2017-0914)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0914 advisory. - Resolves: rhbz1435534 CVE-2017-3157 Arbitrary file disclosure in Calc and Writer - Resolves: rhbz1353839 CVE-2016-4324 dereference of invalid STL iterator on...

Debian DLA-894-1 : samba security update

Jann Horn of Google discovered a time-of-check, time-of-use race condition in Samba, a SMB/CIFS file, print, and login server for Unix. A malicious client can take advantage of this flaw by exploting a symlink race to access areas of the server file system not exported under a share definition. F...

Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3257-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3257-1 advisory. A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, ...

Debian DLA-890-1 : ming security update

It was discovered that there were multiple heap-based buffer overflows in ming, a library to generate SWF Flash files. The updated packages prevent a crash in the 'listswf' utility due to a heap-based buffer overflow in the parseSWFRGBA function and several other functions in parser.c...

Fedora 25 : xen (2017-054729ab08)

Qemu: 9pfs: host memory leakage via v9fscreate CVE-2017-7377 1437873 x86: broken check in memoryexchange permits PV guest breakout XSA-212, CVE-2017-7228 1438804 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenabl...

SUSE SLED12 / SLES12 Security Update : dracut (SUSE-SU-2017:0951-1)

This update for dracut fixes the following issues: Security issues fixed : - CVE-2016-8637: When the early microcode loading was enabled during initrd creation, the initrd would be read-only available for all users, allowing local users to retrieve secrets stored in the initial ramdisk. bsc100834...