Fedora 13 : kernel-2.6.33.8-149.fc13 (2010-13058)

Update to kernel 2.6.33.7: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33.7 Unofficial 2.6.33.8 update from: git://git.kernel.org/?p=linux/kernel/git/jkacur/jk-2.6.git stable/linux-2.6.33.y Additional fixes taken from the 2.6.34.4 stable kernel and 2.6.36-rc1. Note that Tenable...

Fedora 13 : uzbl-0-0.16.20100626gitafc0f873e.fc13 (2010-12260)

Fix a bug in the default configuration for the mouse bindings that can allow crafted links to execute arbitrary shell code. Please check your local configuration and replace '@SELECTEDURI' with '$8' in any string that is executed as shell code usually involves 'sh 'commandshere'. Note that Tenabl...

Ubuntu 9.04 / 9.10 / 10.04 LTS : openjdk-6 vulnerabilities (USN-971-1)

It was discovered that the IcedTea plugin did not correctly check certain accesses. If a user or automated system were tricked into running a specially crafted Java applet, a remote attacker could read arbitrary files with user privileges, leading to a loss of privacy. CVE-2010-2548, CVE-2010-278...

Fedora 13 : httpd-2.2.16-1.fc13 (2010-12478)

This update contains the latest stable release of the Apache HTTP Server. One security fix is included: CVE-2010-1452: moddav, modcache: Fix Handling of requests without a path segment. Several bugs are also fixed: http://www.apache.org/dist/httpd/CHANGES2.2.16 Note that Tenable Network Security...

Ubuntu 9.10 / 10.04 LTS : base-files vulnerability (USN-968-1)

It was discovered that the Ubuntu image shipped on some Dell Latitude 2110 systems was accidentally configured to allow unauthenticated package installations. A remote attacker intercepting network communications or a malicious archive mirror server could exploit this to trick the user into...

Tenable Nessus Detection (HTTP)

HTTP based detection of Tenable Nessus. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801392";...

PHP Version Detection

Nessus was able to determine the version of PHP available on the remote web server. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid48243; scriptversion"1.32"; scriptsetattributeattribute:"pluginmodificationdate", value:"2026/01/22"; scriptxrefname:"IAVT",...

Fedora 13 : gnupg2-2.0.14-4.fc13 (2010-11413)

Fri Jul 23 2010 Rex Dieter - 2.0.14-4 - gpgsm realloc patch - Fri Jun 18 2010 Tomas Mraz - 2.0.14-3 - initialize small amount of secmem for list of algorithms in help 598847 necessary in the FIPS mode of libgcrypt Note that Tenable Network Security has extracted the preceding description block...

Tenable Nessus Web Server < 1.2.4 Plugin Unspecified XSS Vulnerability

Tenable Nessus Web Server is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

MDVA-2010:160 : heartbeat

The heartbeat package in the 2010.0 release had wrong permissions and ownership for /usr/bin/clstatus this prevented it from working correctly. Also when peers were outdated heartbeat didn't failover gracefully. This update fixes both these issues. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...

Apache HTTP Server Version

The remote host is running the Apache HTTP Server, an open source web server. It was possible to read the version number from the banner. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid48204; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate",...

Fedora 12 : sunbird-1.0-0.23.20090916hg.fc12 / thunderbird-3.0.6-1.fc12 (2010-11361)

Update to new upstream Thunderbird version 3.0.6, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security /known-vulnerabilities/thunderbird30.htmlthunderbird3.0.5 http://www.mozilla.org/security/known- vulnerabilities/thunderbird30.htmlthunderbird3.0....

Fedora 13 : libpng10-1.0.54-1.fc13 (2010-10823)

This update addresses two security issues: CVE-2010-1205, in which a buffer overflow might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row. CVE-2010-2249, in which a memory leak allows remote attackers to cause a denial of service memory...

Novell Teaming Detection

The remote web server hosts Novell Teaming, a web-based collaboration application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47803; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Novell Teaming Detection"; scriptsummaryenglish:"Checks fo...

iTunes < 9.2.1 'itpc:' Buffer Overflow (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is older than 9.2.1. Such versions may be affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs which may allow an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker...

VMware Virtual Machine detection (dmidecode)

According to the DMI information, the remote host is a VMware virtual machine. Since it is physically accessible through the network, ensure that its configuration matches your organization's security policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid47761;...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : ghostscript vulnerabilities (USN-961-1)

David Srbecky discovered that Ghostscript incorrectly handled debug logging. If a user or automated system were tricked into opening a crafted PDF file, an attacker could cause a denial of service or execute arbitrary code with privileges of the user invoking the program. This issue only affected...

Fedora 12 : qt-4.6.3-8.fc12 (2010-11020)

This is an update to the latest stable bugfix qt release, including several security fixes related to qtwebkit. For details, see also: http://qt.nokia.com/about/news/nokia-releases-qt-4.6.3 http://qt.nokia.com/developer/changes/changes-4.6.3 Note that Tenable Network Security has extracted the...

Xftp < 3.0 Build 242 LIST Response Buffer Overflow

The version of Xftp, an FTP client for Windows, installed on the remote host is older than 3.0 Build 242. Such versions are reportedly affected by a buffer overflow vulnerability. By tricking a user into double-clicking on a file name included in the 'LIST' command response from a malicious FTP...

Fedora 12 : gv-3.7.1-1.fc12 (2010-10660)

Update to 3.7.1 to fix CVE-2010-2055 and CVE-2010-2056 - Disable international support to avoid segfault on exit Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...