Ubuntu 10.10 : linux vulnerabilities (USN-1361-1)

Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. CVE-2011-3353 A flaw was found in KVM's Programmable Interval Timer PIT. When a virtual interrupt control is not available a local user could use this to caus...

OS Identification : SMTP

Nessus was able to identify the remote operating system based on the banner reported by the mail server running on it. C Tenable, Inc. include"compat.inc"; if description scriptid57915; scriptversion"2.38"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/03/31";...

Fedora 15 : kernel-2.6.42.3-2.fc15 (2012-1503)

CVE-2011-4086: jbd2: unmapped buffer with Unwritten or Delay flags set can lead to DoS rhbz 788260 This update rebases the kernel to the newest upstream stable release 3.2.3. As with previous updates, it presents itself as 2.6.xx still, for compatibility reasons. Note that Tenable Network Securit...

Fedora 16 : znc-0.204-3.fc16 / znc-infobot-0.204-1.fc16 (2012-0921)

Upgrade to 0.204, add init script for EPEL Update to 0.204 to fix CVE-2012-0033 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...

Fedora 16 : ettercap-0.7.4-3.fc16 (2012-1054)

New upstream, and patch for insecure global settings file. Restored RPMOPTFLAGS to build. New upstream, and patch for insecure global settings file. New upstream, and patch for insecure global settings file. New upstream, and patch for insecure global settings file. Note that Tenable Network...

Fedora 16 : mysql-5.5.20-1.fc16 (2012-0972)

Update to MySQL 5.5.20, for various fixes described at http://dev.mysql.com/doc/refman/5.5/en/news-5-5-20.html as well as security fixes described at http://www.oracle.com/technetwork/topics/security/cpujan 2012-366304.html - Re-include the mysqld logrotate script, now that it's not so bogus Note...

HP Data Protector Media Operations Server 'DBServer.exe' Remote Code Execution

According to its version, the installation of HP Data Protector Media Operations Server on the remote host allows an attacker to execute arbitrary code on the affected host with SYSTEM privileges due to a buffer overflow. Note that the vendor reports only Windows installs are affected. C Tenable...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : firefox vulnerabilities (USN-1355-1)

It was discovered that if a user chose to export their Firefox Sync key the 'Firefox Recovery Key.html' file is saved with incorrect permissions, making the file contents potentially readable by other users. CVE-2012-0450 Nicolas Gregoire and Aki Helin discovered that when processing a malformed...

Ubuntu 11.10 : accountsservice vulnerability (USN-1351-1)

Hayawardh Vijayakumar discovered that AccountsService incorrectly handled privileges when modifying the language settings on Ubuntu. A local attacker could exploit this issue to modify arbitrary files, and possibly create a denial of service or obtain increased privileges. Note that Tenable Netwo...

Fedora 15 : qt-4.7.4-10.fc15 (2011-17565)

This build addresses a security issue : - CVE-2011-3922 qt: Stack-based buffer overflow in embedded harfbuzz code as well as includes an upstream patch to address : - 'closed windows stay in the taskbar sometimes, taskbar doesn't react on clicks', http://bugs.kde.org/275469 Note that Tenable...

Fedora 15 : maniadrive-1.2-32.fc15.1 / php-5.3.9-1.fc15 / php-eaccelerator-0.9.6.1-9.fc15.1 (2012-0420)

Security Enhancements and Fixes in PHP 5.3.9 : - Added maxinputvars directive to prevent attacks based on hash collisions. CVE-2011-4885 - Fixed bug 60150 Integer overflow during the parsing of invalid exif header. CVE-2011-4566 Full upstream changelog : http://www.php.net/ChangeLog-5.php5.3.9 No...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : icu vulnerability (USN-1348-1)

It was discovered that ICU did not properly handle invalid locale data during Unicode conversion. If an application using ICU processed crafted data, an attacker could cause it to crash or potentially execute arbitrary code with the privileges of the user invoking the program. Note that Tenable...

Fedora 15 : rubygem-actionpack-3.0.5-5.fc15 (2012-0626)

A cross-site scripting XSS flaw was found in the way the 'translate' helper method of the Ruby on Rails performed HTML escaping of interpolated user input, when interpolation in combination with HTML-safe translations were used. This release fixes the bug. Note that Tenable Network Security has...

Ubuntu 10.10 / 11.04 / 11.10 : curl vulnerability (USN-1346-1)

Dan Fandrich discovered that curl incorrectly handled URLs containing embedded or percent-encoded control characters. If a user or automated system were tricked into processing a specially crafted URL, arbitrary data could be injected. Note that Tenable Network Security has extracted the precedin...

Small SSH RSA Key

The remote SSH daemon has a small key size, which is insecure. Given current technology, it should be 1024 bits at a minimum. TRUSTED...

Ubuntu 11.04 : linux vulnerabilities (USN-1345-1)

Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel...

Fedora 15 : wireshark-1.4.11-1.fc15 (2012-0440)

The following vulnerabilities have been fixed. wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to properly record sizes for many packet capture file formats. wnpa-sec-2012-02 Wireshark could dereference a NULL pointer and crash wnpa-sec-2012-03 The RLC dissector could overflow a...

Ubuntu 10.10 : linux vulnerabilities (USN-1341-1)

Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Dan Rosenberg reported an error in the old ABI compatibility layer of ARM kernels. A local attacker could...

Ubuntu 10.04 LTS : linux-lts-backport-natty vulnerabilities (USN-1337-1)

Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel...