Fedora 15 : puppet-2.6.16-1.fc15 (2012-6055)

This update fixes several security issues recently found in puppet related to filebucket functionality. For full details, refer to the upstream release notes : http://projects.puppetlabs.com/projects/1/wiki/ReleaseNotes2.6.15 Note that Tenable Network Security has extracted the preceding...

Fedora 15 : kernel-2.6.43.2-6.fc15 (2012-6406)

Fixes CVEs : CVE-2012-2123 CVE-2012-2121 CVE-2012-2119 Also fixes a boot regression on some Dell machines Linux 3.3.2 There was a regression at the DVB core, affecting applications that require the DVB status before having a lock. In order to allow a broader test including my environment. All new...

Fedora 15 : gallery3-3.0.3-1.fc15 (2012-5822)

Minor XSS fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 15 : rpm-4.9.1.3-1.fc15 (2012-5420)

This update fixes various input-validation issues in rpm: CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Fedora 17 : samba-3.6.4-82.fc17.1 (2012-5793)

Fixes CVE-2010-1182. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 15 : libtiff-3.9.5-3.fc15 (2012-5406)

Add fix for CVE-2012-1173 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenabl...

SSL Resume With Different Cipher Issue

The SSL implementation on the remote host has been shown to allow a cipher other than the one originally negotiated when resuming a session. An attacker that sees e.g. by sniffing the start of an SSL connection may be able to manipulate session cache to cause subsequent resumptions of that sessio...

Fedora 17 : trytond-2.2.2-1.fc17 (2012-4923)

update for CVE-2012-0215 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Bitsmith Personal Knowbase Detection

Bitsmith Personal Knowbase is installed on the remote host. Bitsmith Personal Knowbase is personal knowledge base storage software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58648; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Commerce Server Installed

Microsoft Commerce Server, an e-commerce platform running on .NET, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58650; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Lenovo ThinkManagement Console Detection

Lenovo ThinkManagement Console, a web-based API for Lenovo ThinkManagement, was found on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58653; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lenovo ThinkManagement Console...

Fedora 16 : libtasn1-2.12-1.fc16 (2012-4342)

New upstream package with minor improvements and security fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Microsoft Visual FoxPro Installed

Microsoft Visual FoxPro, an IDE for the Visual FoxPro programming language, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58645; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/31";...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : libpng vulnerability (USN-1417-1)

It was discovered that libpng incorrectly handled certain memory operations. If a user or automated system using libpng were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or execute code with the privileges of the user invoking the...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : tiff vulnerabilities (USN-1416-1)

Alexander Gavrun discovered that the TIFF library incorrectly allocated space for a tile. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a denial of...

IrfanView < 4.33 Boundary Error Multiple Image File Handling Remote Overflow

The remote Windows host contains a version of IrfanView earlier than 4.33. As such, it is reportedly affected by a heap-based buffer overflow vulnerability due to the way the application handles RLE compressed bitmap files. An attacker could trick a user into opening specially crafted DIB, RLE, o...

Fedora 15 : drupal6-date-2.8-1.fc15 (2012-4616)

New upstream, security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Ubuntu 11.10 : linux vulnerabilities (USN-1405-1)

Paolo Bonzini discovered a flaw in Linux's handling of the SGIO ioctl command. A local user, or user in a VM could exploit this flaw to bypass restrictions and gain read/write access to all data on the affected block device. CVE-2011-4127 A flaw was found in the Linux kernel's ext4 file system wh...

Ubuntu 11.04 : linux vulnerabilities (USN-1406-1)

This USN was released in error and has been removed. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

2X ApplicationServer TuxSystem ActiveX ExportSettings() Method Arbitrary File Overwrite

The install of the 2X ApplicationServer TuxSystem ActiveX control on the remote host reportedly could be abused to create or overwrite arbitrary files on the affected host using its 'ExportSettings' method. By tricking a user into opening a specially crafted web page, a remote, unauthenticated...