11774 matches found
Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : qemu-kvm vulnerability (USN-1339-1)
Nicolae Mogoreanu discovered that QEMU did not properly verify legacy mode packets in the e1000 network driver. A remote attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program. When using QEMU with libvirt or...
Fedora 16 : wireshark-1.6.5-1.fc16 (2012-0435)
The following vulnerabilities have been fixed. wnpa-sec-2012-01 Laurent Butti discovered that Wireshark failed to properly record sizes for many packet capture file formats. wnpa-sec-2012-02 Wireshark could dereference a NULL pointer and crash wnpa-sec-2012-03 The RLC dissector could overflow a...
Fedora 16 : maniadrive-1.2-32.fc16.1 / php-5.3.9-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.1 (2012-0504)
Security Enhancements and Fixes in PHP 5.3.9 : - Added maxinputvars directive to prevent attacks based on hash collisions. CVE-2011-4885 - Fixed bug 60150 Integer overflow during the parsing of invalid exif header. CVE-2011-4566 Full upstream changelog : http://www.php.net/ChangeLog-5.php5.3.9 No...
Fedora 16 : openstack-nova-2011.3.1-0.4.10818.fc16 (2012-0682)
Update to 2011.3.1 release candidate. See https://launchpad.net/nova/+milestone/2011.3.1 This also includes a minor bug fix for libguestfs file injection This update includes 50 patches from the upstream stable branch and a fix for an issue with attaching volumes. Sync up with Fedora spec, to onl...
MySQL < 4.0.20 File Overwrite
The version of MySQL installed on the remote host is older than 4.0.20. A local attacker could exploit a flaw in mysqlbug to overwite arbitrary files via a symlink attack. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17823; scriptversion"1.8"; scriptcvsdate"Date:...
Ubuntu 11.04 / 11.10 : libav vulnerabilities (USN-1333-1)
Steve Manzuik discovered that Libav incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the...
op5 Portal Detection
The remote web server hosts op5 Portal, a web interface platform that contains several other components produced by op5, notably op5 Monitor. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57575; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...
IrfanView Detection
IrfanView, a graphic viewer, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57559; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"IrfanView Detection";...
ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-015 : 0Day HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-12-015 January 12, 2012 - -- CVE ID: CVE-2011-4788 - -- CVSS: 9, AV:N/AC:L/Au:N/C:C/I:P/A:P - -- Affecte...
Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1332-1)
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Dan Rosenberg reported an error in the old ABI compatibility layer of ARM kernels. A local attacker could...
Ubuntu 11.10 : nova vulnerability (USN-1326-1)
Nachi Ueno, Rohit Karajgi, and Venkatesan Ravikumar discovered that when Nova is configured to use the OpenStack API, it would not correctly enforce access controls on certain incoming requests. A remote authenticated attacker could exploit this to change resources of arbitrary tenants. Note that...
Ubuntu 8.04 LTS : linux vulnerabilities (USN-1323-1)
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. CVE-2011-1162 Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel...
Fedora 16 : ruby-1.8.7.357-1.fc16 (2011-17542)
A security flaw was found on the previous ruby that with some series of strings which was specially crafted to intentionally collide their hash values with each other, rails applications may fall into denial of services when such strings are used in HTTP requests CVE-2011-4815. This new ruby will...
Cisco IOS Locally Defined User Enumeration
It is possible to enumerate all locally defined users, which are used for authentication, on a Cisco IOS device if aaa new-model is not used. TRUSTED...
Ubuntu 11.10 : linux vulnerability (USN-1322-1)
Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable h...
Ubuntu 11.04 / 11.10 : mozvoikko, ubufox update (USN-1306-2)
USN-1306-1 fixed vulnerabilities in Firefox. This update provides updated Mozvoikko and ubufox packages for use with Firefox 9. Alexandre Poirot, Chris Blizzard, Kyle Huey, Scoobidiver, Christian Holler, David Baron, Gary Kwong, Jim Blandy, Bob Clary, Jesse Ruderman, Marcia Knous, and Rober Longs...
OpenSSL < 0.9.6b Predictable Random Generator
According to its banner, the remote web server is running a version of OpenSSL that is earlier than 0.9.6b and allows remote attackers to predict the output of the pseudo-random generator. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17745; scriptversion"1.11";...
Fedora 16 : phpMyAdmin-3.4.9-1.fc16 (2011-17369)
Changes 3.4.9.0 2011-12-21 : - edit Inline editing enum fields with null shows no dropdown - interface DB suggestion not correct for user with underscore - core Magic quotes removed in PHP 5.4 - session No feedback when result is empty signon authtype - display Problems regarding ShowTooltipAlias...
Fedora 16 : glibc-2.14.90-24.fc16.4 (2011-17386)
Reverts 552960 patch which is causing a variety of problems. - Sun Dec 18 2011 Jeff Law - 2.14.90-24.fc16.3 - Check values from TZ file header 767696 - Handle EAGAIN from FUTEXWAITREQUEUEPI 552960 - Add dist. - Correct return value from pthreadcreate when stack allocation fails. 767746 - Wed Dec ...
PuTTY Password Local Information Disclosure
The remote host has an installation of PuTTY between 0.59 and 0.61, inclusive. Such versions are known to contain an information disclosure issue, where PuTTY neglects to wipe passwords from memory that it no longer requires. Note that to exploit this vulnerability, a malicious, local process mus...