Ubuntu 14.04 LTS : GNU C Library vulnerabilities (USN-2306-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2306-1 advisory. Maksymilian Arciemowicz discovered that the GNU C Library incorrectly handled the getaddrinfo function. An attacker could use this issue to cause a denia...

Ubuntu 14.04 LTS : Samba vulnerability (USN-2305-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2305-1 advisory. Volker Lendecke discovered that the Samba NetBIOS name service daemon incorrectly handled certain memory operations. A remote attacker could use this issue to...

Fedora 20 : kernel-3.15.7-200.fc20 (2014-9010)

The 3.15.7 stable update contains a number of important fixes throughout the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 20 : bugzilla-4.2.10-1.fc20 (2014-8920)

This version of bugzilla includes a security fix for CVE-2014-1546. With previous versions, an attacker can get access to some bug information using the victim's credentials using a specially crafted HTML page. Note that Tenable Network Security has extracted the preceding description block...

Ubuntu 14.04 LTS : KDE-Libs vulnerability (USN-2304-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2304-1 advisory. It was discovered that kauth was using polkit in an unsafe manner. A local attacker could possibly use this issue to bypass intended polkit authorizations. Tenabl...

Ubuntu 14.04 LTS : Unity vulnerability (USN-2303-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2303-1 advisory. It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A local attacker could possibly...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3053)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3053 advisory. - filter: prevent nla extensions to peek beyond the end of the message Mathias Krause Orabug: 19315782 CVE-2014-3144 CVE-2014-3145 Tenable has...

Oracle Linux 6 / 7 : unbreakable enterprise kernel (ELSA-2014-3052)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3052 advisory. - filter: prevent nla extensions to peek beyond the end of the message Mathias Krause Orabug: 19315781 CVE-2014-3144 CVE-2014-3145 Tenable has...

Fedora 19 : moodle-2.4.11-1.fc19 (2014-8609)

Fixes for : CVE-2014-3541, CVE-2014-3542, CVE-2014-3543, CVE-2014-3544, CVE-2014-3545, CVE-2014-3546, CVE-2014-3547, CVE-2014-3548, CVE-2014-3549, CVE-2014-3550, CVE-2014-3551, CVE-2014-3552, CVE-2014-3553 https://moodle.org/mod/forum/discuss.php?d=263858 http://seclists.org/oss-sec/2014/q3/195...

Oracle Linux 5 / 6 : unbreakable enterprise kernel (ELSA-2014-3054)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3054 advisory. - filter: prevent nla extensions to peek beyond the end of the message Mathias Krause Orabug: 19315783 CVE-2014-3144 CVE-2014-3145 - futex: Forbid...

Fedora 19 : drupal6-6.32-1.fc19 (2014-8488)

https://www.drupal.org/SA-CORE-2014-003 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Oracle Linux 5 : kernel (ELSA-2014-0926)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0926 advisory. - infiniband rds: do not deref NULL dev in rdsiwladdrcheck Jacob Tanenbaum 1093311 1093312 CVE-2014-2678 - xen page-alloc: scrub anonymous domain heap...

Fedora 19 : java-1.8.0-openjdk-1.8.0.11-1.b12.fc19 (2014-8441)

Security update to update 11, build 12. http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.h tmlAppendixJAVA Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

Do not scan localhost on the Tenable Appliance or Tenable.io

Binary data dontscanlocalhost.nbin...

Ubuntu 14.04 LTS : LZO vulnerability (USN-2300-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2300-1 advisory. Don A. Bailey discovered that LZO incorrectly handled certain input data. An attacker could use this issue to cause LZO to crash, resulting in a denial of service...

Oracle Linux 7 : libtasn1 (ELSA-2014-0687)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0687 advisory. 3.3-5 - Added missing check for null pointer 1102338 3.3-4 - Fix multiple decoding issues 1102338 Tenable has extracted the preceding description block...

Oracle Linux 7 : tomcat (ELSA-2014-0827)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0827 advisory. - Resolves: CVE-2014-0099 Fix possible overflow when parsing - Resolves: CVE-2014-0096 Information discloser process XSLT Tenable has extracted the...

Oracle Linux 7 : java-1.6.0-openjdk (ELSA-2014-0685)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0685 advisory. 1:1.6.0.1-6.1.13.3 - updated to icedtea 1.13.3 - updated to openjdk-6-src-b31-15apr2014 - renmoved upstreamed patch7, 1.13fixes.patch - renmoved...

WebTitan Default Credentials (ssh)

The account 'admin' is using a default password. A remote, unauthenticated attacker could exploit this to log in as a privileged user and gain access to the WebTitan configuration menu. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid76777; scriptversion"$Revision: 1....

Oracle Linux 7 : samba (ELSA-2014-0867)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0867 advisory. - resolves: 1105504 - CVE-2014-0244: DoS in nmbd. - resolves: 1108844 - CVE-2014-3493: DoS in smbd with unicode path names. - resolves: 1105573 -...