Fedora 16 : kernel-3.2.10-3.fc16 (2012-3712)

Update to the 3.2.10 stable release, which contains a number of fixes across the kernel. Fixes CVE-2012-1146 Fixes CVE-2012-1179 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

Fedora 15 : kernel-2.6.42.9-2.fc15 (2012-3356)

CVE-2012-1097 regset: Prevent NULL pointer reference on readonly regsets Disable threading in hibernate compression/decompression Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically cle...

Fedora 17 : libpng10-1.0.58-1.fc17 (2012-3507)

A type conversion flaw leading to an out-of-bounds heap buffer read was found in the way libpng10, a library of functions for manipulation PNG image format files, performed expansion of certain iCCP, iTXt, and zTXt PNG image file chunks. A remote attacker could provide a specially crafted Portabl...

Fedora 16 : puppet-2.6.14-1.fc16 (2012-2415)

Please refer to the upstream release notes for details : http://projects.puppetlabs.com/projects/1/wiki/ReleaseNotes2.6.14 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : python-pam vulnerability (USN-1395-1)

Markus Vervier discovered that PyPAM incorrectly handled passwords containing NULL bytes. An attacker could exploit this to cause applications using PyPAM to crash, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from t...

Fedora 15 : postgresql-9.0.7-1.fc15 (2012-2589)

Update to latest Postgres releases --- resolves some security and data loss bugs http://www.postgresql.org/docs/9.1/static/release-9-1-3.html http://www.postgresql.org/docs/9.0/static/release-9-0-7.html Note that Tenable Network Security has extracted the preceding description block directly from...

iCloud Detection (Windows)

iCloud is installed on this host. It is a cloud storage and computing service from Apple. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58292; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"iCloud...

Fedora 15 : httpd-2.2.22-1.fc15 (2012-1642)

This update contains the latest stable release of the Apace HTTP Server, version 2.2.22. This release fixes various bugs, and the following security issues : - Reject requests where the request-URI does not match the HTTP specification, preventing unexpected expansion of target URLs in some rever...

Fedora 17 : tremulous-1.2.0-0.4.beta1.fc17 (2012-2238)

Fixes CVE-2011-2764 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora 17 : java-1.7.0-openjdk-1.7.0.3-2.1.fc17 (2012-2595)

Updated to OpenJDK7u3/IcedTea7 2.1 - Removed upstreamed glibc nameclash patch - Added patch to remove the -mimpure option to gcc - Security fixes : - S7112642, CVE-2012-0497: Incorrect checking for graphics rendering object - S7082299, CVE-2011-3571: AtomicReferenceArray insufficient array type...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : python-httplib2 vulnerability (USN-1375-1)

The httplib2 Python library earlier than version 0.7.0 did not perform any server certificate validation when using HTTPS connections. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to alter or compromise confidential information in applications...

Microsoft Silverlight Installed (Mac OS X)

A version of Microsoft Silverlight is installed on this host. Microsoft Silverlight is a web application framework that provides functionalities similar to those in Adobe Flash, integrating multimedia, graphics, animations and interactivity into a single runtime environment. TRUSTED...

Ubuntu 10.04 LTS / 10.10 : xulrunner-1.9.2 vulnerability (USN-1367-4)

USN-1367-1 fixed vulnerabilities in libpng. This provides the corresponding update for Xulrunner. Jueri Aedla discovered that libpng did not properly verify the size used when allocating memory during chunk decompression. If a user or automated system using libpng were tricked into opening a...

LDAP 'Domain Admins' Group Membership Enumeration

By using the search base gathered by plugin ID 25701 and the supplied credentials, Nessus was able to enumerate the list of members of the 'Domain Admins' group in the remote LDAP directory. Several Domain Admins groups may be returned if the LDAP port corresponds to a Global Catalog server i.e...

Fedora 15 : usbmuxd-1.0.7-3.fc15 (2012-1213)

Fixes CVE-2012-0065 It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user. Note that Tenable Networ...

Fedora 16 : usbmuxd-1.0.7-3.fc16 (2012-1192)

Fixes CVE-2012-0065 It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user. Note that Tenable Networ...

Tenable Release Nessus 5.0 vulnerability scanner

Tenable Release Nessus 5.0 vulnerability scanner Tenable Network Security announced Nessus 5.0 vulnerability and configuration assessment solution for enterprises and security professionals. Nessus version 5.0 introduces key features and improvements, separated into the four major phases of the...

Fedora 16 : seamonkey-2.7.1-1.fc16 (2012-1665)

Update to 2.7.1 mozilla security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 / 11.10 : devscripts vulnerabilities (USN-1366-1)

Paul Wise discovered that debdiff did not properly sanitize its input when processing .dsc and .changes files. If debdiff processed a crafted file, an attacker could execute arbitrary code with the privileges of the user invoking the program. CVE-2012-0210 Raphael Geissert discovered that debdiff...

Kayako SupportSuite Detection

The remote web server is running Kayako SupportSuite, a customer support application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57975; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...