Atlassian Confluence Wiki Detection

Atlassian Confluence, a wiki written in Java, is running on the remote web server. Note: The plugin supports authentication when HTTP basic or digest access credentials are supplied in the configuration. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53574;...

Fedora 15 : libtiff-3.9.5-1.fc15 (2011-5336)

Update to libtiff 3.9.5, incorporating all our previous patches plus other fixes, notably the fix for CVE-2009-5022 Fix incorrect fix for CVE-2011-0192 Add fix for CVE-2011-1167 Fix buffer overrun in fax decoding CVE-2011-0192 as well as a non-security-critical crash in gif2tiff. Note that Tenabl...

Fedora 13 : python-feedparser-5.0.1-1.fc13 (2011-4911)

Current release: 5.0.1 - February 20, 2011 - Fix issue 91 invalid text in XML declaration causes sanitizer to crash - Fix issue 254 sanitization can be bypassed by malformed XML comments - Fix issue 255 sanitizer doesn't strip unsafe URI schemes Previous release: 5.0 - January 25, 2011 - Improved...

Fedora 14 : python-feedparser-5.0.1-1.fc14 (2011-4894)

Current release: 5.0.1 - February 20, 2011 - Fix issue 91 invalid text in XML declaration causes sanitizer to crash - Fix issue 254 sanitization can be bypassed by malformed XML comments - Fix issue 255 sanitizer doesn't strip unsafe URI schemes Previous release: 5.0 - January 25, 2011 - Improved...

Fedora 14 : ikiwiki-3.20110328-1.fc14 (2011-5180)

Update to latest upstream version 3.20110328. Security fixes : - Possible JavaScript insertion via insufficient htmlscrubbing of alternate stylesheets. CVE-2011-1401 - JavaScript insertion via insufficient checking in comments. CVE-2011-0428 See http://ikiwiki.info/news/ for the full list of...

Fedora 15 : openldap-2.4.24-2.fc15 (2011-3612)

Three security issues were fixed during the rebase! Changes not covered by bugs : - new: system resource limiting for slapd using ulimit - fix: possible NULL pointer dereference in NSS implementation OpenLDAP package was rebased to 2.4.24. Extension of API : - libldap adds: ldapdestroy ldapdup...

Fedora 14 : darktable-0.8-7.fc14.1 / exiv2-0.21.1-1.fc14 / geeqie-1.0-9.fc14.1 / gipfel-0.3.2-7.fc14 / etc (2011-5200)

This update is the second in a series of monthly stabilization updates to the 4.6 series. 4.6.2 brings many bugfixes and translation updates on top of the latest edition in the 4.6 series and is a recommended update for everyone running 4.6.1 or earlier versions. See also:...

Fedora 13 : kdenetwork-4.5.5-2.fc13 (2011-5211)

The new package fixes the security in kget. For more info please take a look at http://www.kde.org/info/security/advisory-20100513-1.txt Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 13 : dhcp-4.1.2-4.ESV.R2.fc13 (2011-0848)

This is a SECURITY release of ISC DHCP, which fixes two security related bugs: CVE-2011-0413: DHCPv6 server CVE-2011-0997: dhclient Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

IBM Tivoli Monitoring Java Unspecified Vulnerability

According to the version found in the .properties files, the remote host has a version of IBM Tivoli Monitoring that contains a Category I security finding in the packaged version of Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53490; scriptversion"1.7";...

OS Identification : HNAP

The remote operating system can be identified through information collected via HNAP Home Network Administration Protocol. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53471; scriptversion"1.12"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"OS Identification...

Fedora 15 : xorg-x11-server-utils-7.5-5.fc15 (2011-4984)

fixes CVE-2011-0465 root hole via rogue hostname in xrdb Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...

Fedora 15 : perl-5.12.3-156.fc15 (2011-4631)

Security bug: lc launder tainted data http://rt.perl.org/rt3/Public/Bug/Display.html?id=87336 Cwd.so should go the subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : nss vulnerabilities (USN-1106-1)

It was discovered that several invalid HTTPS certificates were issued and revoked. An attacker could exploit these to perform a man in the middle attack to view sensitive information or alter encrypted communications. These certificates were marked as explicitly not trusted to prevent their misus...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : ffmpeg vulnerabilities (USN-1104-1)

Cesar Bernardini and Felipe Andres Manzano discovered that FFmpeg incorrectly handled certain malformed flic files. If a user were tricked into opening a crafted flic file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : tiff vulnerability (USN-1102-1)

Martin Barbella discovered that the thunder aka ThunderScan decoder in the TIFF library incorrectly handled an unexpected BitsPerSample value. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privilege...

ZDI-11-115: IBM solidDB solid.exe Authentication Bypass Remote Code Execution Vulnerability

ZDI-11-115: IBM solidDB solid.exe Authentication Bypass Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-115 April 1, 2011 -- CVSS: 9.3, AV:N/AC:M/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM solidDB -- TippingPointTM IPS Customer...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : qt4-x11 vulnerabilities (USN-1101-1)

It was discovered that several invalid HTTPS certificates were issued and revoked. An attacker could exploit these to perform a man in the middle attack to view sensitive information or alter encrypted communications. These were placed on the certificate blacklist to prevent their misuse. Note th...

Fedora 14 : php-doctrine-Doctrine-1.2.4-1.fc14 (2011-4098)

upstream 1.2.4 security update, see: http://www.doctrine-project.org/blog/doctrine-security-fix Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possib...

Fedora 14 : pure-ftpd-1.0.30-1.fc14 (2011-3349)

Wietse Venema and Victor Duchovni discovered and reported an issue that could lead to a potential information disclosure. An unencrypted FTP command immediately following STARTTLS request would get buffered and processed prior to SSL/TLS handshake, resulting in potential authentication bypass in...