Fedora 18 : kernel-3.10.14-100.fc18 (2013-18364)

The 3.10.14 stable update contains a number of important fixes across the tree. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

MS13-087: Vulnerability in Silverlight Could Allow Information Disclosure (2890788) (Mac OS X)

The version of Microsoft Silverlight installed on the remote host is reportedly affected by an information disclosure vulnerability due to its failure to properly handle certain objects in memory. If an attacker could trick a user on the affected system into visiting a website hosting a malicious...

Fedora 20 : wireshark-1.10.2-7.fc20 (2013-17627)

dumpcap now stores temporary capture files in /var/tmp - Convert automake/pkgconfig files into patches better upstream integration - Restored category in the .desktop file - Install another one necessary header file - framedatasequence.h - Add basic OpenFlow dissector - Ver. 1.10.2 - Ver. 1.10.1...

Ubuntu 12.04 LTS / 12.10 : python3.2 vulnerabilities (USN-1984-1)

Florian Weimer discovered that Python incorrectly handled matching multiple wildcards in ssl certificate hostnames. An attacker could exploit this to cause Python to consume resources, resulting in a denial of service. CVE-2013-2099 Ryan Sleevi discovered that Python did not properly handle...

Ubuntu 12.04 LTS : libkdcraw vulnerabilities (USN-1978-1)

It was discovered that libKDcraw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, applications linked against libKDcraw could be made to crash, resulting in a denial of service. CVE-2013-1438, CVE-2013-1439. Note that...

Ubuntu 12.04 LTS / 12.10 / 13.04 : txt2man vulnerability (USN-1979-1)

Patrick J Cherry discovered that txt2man contained leftover debugging code that incorrectly created a temporary file. A local attacker could possibly use this issue to overwrite arbitrary files. In the default Ubuntu installation, this should be prevented by the Yama link restrictions. Note that...

SecurityCenter devform.php message Parameter XSS

The version of Tenable Network Security SecurityCenter installed on the remote host contains the 'devform.php' script. This PHP script is affected by a cross-site scripting vulnerability because the application does not properly validate user-supplied input to the 'message' parameter. An attacker...

Fedora 18 : filezilla-3.7.3-1.fc18 (2013-14794)

Merge further fixes from PuTTY to address CVE-2013-4206, CVE-2013-4207, CVE-2013-4208 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 19 : zabbix-2.0.6-3.fc19 (2013-14029)

This update solves a security issue involving the use of libcurl in the code used to access the eztexting service. It potentially allows for man-in-the-middle attacks. The issue was described as CVE-2012-6086. Please refer to https://support.zabbix.com/browse/ZBX-5924 for details! Note that Tenab...

Oracle Linux 5 : kernel (ELSA-2013-1292)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1292 advisory. - kernel signals: stop info leak via tkill and tgkill syscalls Oleg Nesterov 970874 970875 CVE-2013-2141 - net ipv6: do udppushpendingframes AFINET soc...

Ubuntu 12.04 LTS : linux-lts-raring vulnerabilities (USN-1971-1)

Vince Weaver discovered a flaw in the perf subsystem of the Linux kernel on ARM platforms. A local user could exploit this flaw to gain privileges or cause a denial of service system crash. CVE-2013-4254 A memory leak was discovered in the user namespace facility of the Linux kernel. A local user...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1970-1)

Vince Weaver discovered a flaw in the perf subsystem of the Linux kernel on ARM platforms. A local user could exploit this flaw to gain privileges or cause a denial of service system crash. CVE-2013-4254 A failure to validate block numbers was discovered in the Linux kernel's implementation of th...

Adobe JRun Detection

The remote host has Adobe JRun installed. JRun is an application server for Java applications. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70175; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Adobe...

Juniper NetScreen VPN Client Detection

The remote host has the Juniper NetScreen VPN Client installed. C Tenable Network Security. Inc. include"compat.inc"; if description scriptid70120; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT", value:"0001-T-0914";...

CVE-2013-5911

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2013-5911

The CVE-2013-5911 entry describes a cross-site scripting (XSS) vulnerability in Tenable SecurityCenter’s devform.php, affecting versions 4.6 through 4.7. The underlying cause is improper validation of user-supplied input to the message parameter, allowing an attacker to inject arbitrary HTML/Java...

CVE-2013-5911

Cross-site scripting XSS vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.04 : pyopenssl vulnerability (USN-1965-1)

It was discovered that pyOpenSSL did not properly handle certificates with NULL characters in the Subject Alternative Name field. An attacker could exploit this to perform a man in the middle attack to view sensitive information or alter encrypted communications. Note that Tenable Network Securit...

Fedora 19 : proftpd-1.3.4d-4.fc19 (2013-16798)

This update addresses an issue with modsftp and modsftppam in which a malicious client could cause the server to make extremely large memory requests and potentially crash. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...