Multiple Vendor SNMP public Community String Information Disclosure

Nessus was able to enumerate sensitive information on the remote device by sending SNMP requests using 'public' as the SNMP community string. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid74091; scriptversion"$Revision: 1.2 $"; scriptcvsdate"$Date: 2015/09/24 23:21:...

Fedora 20 : kernel-3.14.4-200.fc20 (2014-6357)

The 3.14.4 stable update contains a number of important fixes across the tree Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Ubuntu 14.04 LTS : Dovecot vulnerability (USN-2213-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2213-1 advisory. It was discovered that Dovecot incorrectly handled closing inactive SSL/TLS connections. A remote attacker could use this issue to cause Dovecot to stop respondin...

Ubuntu 14.04 LTS : libXfont vulnerabilities (USN-2211-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2211-1 advisory. Ilja van Sprundel discovered that libXfont incorrectly handled font metadata file parsing. A local attacker could use this issue to cause libXfont to...

Fedora 20 : owncloud-6.0.3-1.fc20 (2014-5918)

bugfix release 6.0.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Hosts File Whitelisted Entries

This script allows entries in a customized 'hosts' file to be whitelisted so that they are ignored by plugins that check for abnormalities in the 'hosts' file. TRUSTED...

Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3023)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-3023 advisory. kernel-uek 2.6.32-400.34.5uek - aacraid: missing capable check in compat ioctl Dan Carpenter Orabug: 18723276 CVE-2013-6383 Tenable has extracted the...

Oracle Linux 6 : kernel (ELSA-2014-0475)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-0475 advisory. - scsi AACRAID Driver compat IOCTL missing capability check Jacob Tanenbaum 1033533 1033534 CVE-2013-6383 - net netfilter: nfconntrackdccp: fix...

Ubuntu 14.04 LTS : cups-filters vulnerability (USN-2210-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2210-1 advisory. Sebastian Krahmer discovered that cups-browsed incorrectly filtered remote printer names and strings. A remote attacker could use this issue to possibly execute...

Fedora 19 : fish-2.1.0-9.fc19 (2014-5783)

CVE-2014-2905 is severe. Apparently requesting stable instead of testing doesn't work. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Ubuntu 14.04 LTS : LibTIFF vulnerabilities (USN-2205-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2205-1 advisory. Pedro Ribeiro discovered that LibTIFF incorrectly handled certain malformed images when using the gif2tiff tool. If a user or automated system were trick...

Ubuntu 12.10 : quantum vulnerability (USN-2208-2)

USN-2208-1 fixed vulnerabilities in OpenStack Cinder. This update provides the corresponding updates for OpenStack Quantum. JuanFra Rodriguez Cardoso discovered that OpenStack Cinder did not enforce SSL connections when Nova was configured to use QPid and qpidprotocol is set to 'ssl'. If a remote...

Ubuntu 12.10 : cinder vulnerability (USN-2208-1)

JuanFra Rodriguez Cardoso discovered that OpenStack Cinder did not enforce SSL connections when Nova was configured to use QPid and qpidprotocol is set to 'ssl'. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. Ubunt...

Fedora 19 : varnish-3.0.5-1.fc19 (2013-24023)

New upstream release 3.0.5. List of changes available at https://www.varnish-cache.org/releases/varnish-cache-3.0.5 - Changed default mask for varnish log dir to 700, closing 915413 - Added a patch for CVE-2013-4484 from upstream, closing 1025128 Note that Tenable Network Security has extracted t...

Ubuntu 14.04 LTS : Linux kernel vulnerability (USN-2204-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-2204-1 advisory. A flaw was discovered in the Linux kernel's pseudo tty pty device. An unprivileged user could exploit this flaw to cause a denial of service system crash or...

Ubuntu 12.10 : linux vulnerability (USN-2202-1)

A flaw was discovered in the Linux kernel's pseudo tty pty device. An unprivileged user could exploit this flaw to cause a denial of service system crash or potentially gain administrator privileges. Note that Tenable Network Security has extracted the preceding description block directly from th...

Ubuntu 14.04 LTS : JBIG-KIT vulnerability (USN-2190-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2190-1 advisory. Florian Weimer discovered that JBIG-KIT incorrectly handled certain malformed images. If a user or automated system were tricked into processing a specially craft...

Fedora 20 : zabbix-2.0.11-3.fc20 (2014-5540)

The logrotate configuration had no su statement in 2.0.11-2. Furthermore, the log file should have been created as zabbixsrv:zabbix for the proxy and server, what they are now. http://www.zabbix.com/rn2.0.11.php Also solves 3 security issues : - ZBX-7703 fixed being able to switch users without...

Fedora 20 : python-django-1.6.3-1.fc20 (2014-5503)

update to 1.6.3 fixing CVE-2014-0473 and CVE-2014-0474 update to 1.6.2 rhbz1027766 Please note, it is required to update python-django and python3-django as well in one transaction. yum update or dnf update will do that for you. Note that Tenable Network Security has extracted the preceding...

Oracle Linux 5 / 6 : thunderbird (ELSA-2014-0449)

The remote Oracle Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2014-0449 advisory. 24.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 24.5.0-1 - Update to 24.5.0 Tenable has...