Fedora 14 : bugzilla-3.6.3-1.fc14 (2010-17274)

The following security issues have been discovered in Bugzilla : - There is a way to inject both headers and content to users, causing a serious Cross-Site Scripting vulnerability. - It was possible to see graphs from Old Charts even if you did not have access to a particular product, and you cou...

Fedora 12 : seamonkey-2.0.10-1.fc12 (2010-17145)

Update to new upstream SeaMonkey version 2.0.10, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/known-vulnerabilities/se amonkey20.htmlseamonkey2.0.9 - http://www.mozilla.org/security/known-vulnerabilities/ seamonkey20.htmlseamonkey2.0.10...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : libxml2 vulnerability (USN-1016-1)

Bui Quang Minh discovered that libxml2 did not properly process XPath namespaces and attributes. If an application using libxml2 opened a specially crafted XML file, an attacker could cause a denial of service or possibly execute code as the user invoking the program. Note that Tenable Network...

Fedora 13 : seamonkey-2.0.10-1.fc13 (2010-17084)

Update to new upstream SeaMonkey version 2.0.10, fixing multiple security issues detailed in the upstream advisories : - http://www.mozilla.org/security/known-vulnerabilities/se amonkey20.htmlseamonkey2.0.9 - http://www.mozilla.org/security/known-vulnerabilities/ seamonkey20.htmlseamonkey2.0.10...

HP Systems Insight Control Detection

HP Systems Insight Control implements infrastructure management and has the ability to deploy, migrate, monitor, control, and optimize IT infrastructure through a management console. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50539; scriptversion"1.7";...

OS Identification : SIP

The remote operating system can be identified through the banner reported by a SIP service running on it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50542; scriptversion"1.24"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/06/12";...

Ubuntu 10.04 LTS : libvirt regression (USN-1008-4)

USN-1008-1 fixed vulnerabilities in libvirt. The upstream fixes for CVE-2010-2238 changed the behavior of libvirt such that the domain XML could not specify 'hostdevice' as the qemu sub-type. While libvirt 0.8.3 and later will longer support specifying this sub-type, this update restores the old...

Web Common Credentials

Nessus was able to read protected web pages by using common login and password combinations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid50504; scriptversion"1.14";...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : freetype vulnerabilities (USN-1013-1)

Marc Schoenefeld discovered that FreeType did not correctly handle certain malformed font files. If a user were tricked into using a specially crafted font file, a remote attacker could cause FreeType to crash or possibly execute arbitrary code with user privileges. This issue only affected Ubunt...

Fedora 14 : gnucash-2.3.15-2.fc14 (2010-16762)

This removes an unneeded file in GnuCash that could cause a security issue if ran from a directory that other users had write access to. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 12 : cvs-1.11.23-9.fc12 (2010-16599)

Thu Oct 21 2010 Petr Pisar - 1.11.23-9 - Fix CVE-2010-3846 bug 645386 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 14 : sunbird-1.0-0.31.b2pre.fc14 / thunderbird-3.1.6-1.fc14 (2010-16926)

Update to new upstream Thunderbird version 3.1.6, fixing multiple security issues detailed in the upstream advisory : - http://www.mozilla.org/security/known-vulnerabilities/th underbird31.htmlthunderbird3.1.5 - http://www.mozilla.org/security/known-vulnerabilities/...

Fedora 13 : subversion-1.6.13-1.fc13 (2010-16136)

This update includes the latest stable release of Subversion, version 1.6.13. Subversion servers up to 1.6.12 inclusive making use of the 'SVNPathAuthz shortcircuit' moddavsvn configuration setting have a bug which may allow users to write and/or read portions of the repository to which they are...

Fedora 14 : sepostgresql-9.0.1-20101007.fc14 (2010-15870)

Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...

Solaris 10 (sparc) : 144536-02

SunOS 5.10: libc.so.1 patch. Date this patch was last updated by Sun : Oct/27/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

Fedora 13 : sepostgresql-9.0.1-20101007.fc13 (2010-16004)

Upgrade base version to v9.0.1 which contains various bug and security fixes. - http://www.postgresql.org/docs/9.0/static/release-9-0.ht ml - http://www.postgresql.org/docs/9.0/static/release-9-0- 1.html Note that Tenable Network Security has extracted the preceding description block directly fro...

Ubuntu 10.04 LTS : libvirt update (USN-1008-3)

USN-1008-1 fixed vulnerabilities in libvirt. The update for Ubuntu 10.04 LTS reverted a recent bug fix update. This update fixes the problem. We apologize for the inconvenience. It was discovered that libvirt would probe disk backing stores without consulting the defined format for the disk. A...

AIX 610002 : U837025

The remote host is missing AIX PTF U837025 which is related to the security of the package bos.sysmgt.servaid You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610004 : U836747

The remote host is missing AIX PTF U836747 which is related to the security of the package bos.64bit You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610004 : U836746

The remote host is missing AIX PTF U836746 which is related to the security of the package bos.wpars You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...