Fedora 19 : kernel-3.13.5-103.fc19 (2014-3448)

This kernel update contains a number of CVE fixes, all users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Fedora 20 : rubygem-actionpack-4.0.0-2.fc20 (2013-23636)

Includes security patches for : - CVE-2013-6417 - Incomplete fix to CVE-2013-0155 Unsafe Query Generation Risk - CVE-2013-4491 - Reflective XSS Vulnerability in Ruby on Rails - CVE-2013-6415 - XSS Vulnerability in numbertocurrency - CVE-2013-6414 - Denial of Service Vulnerability in Action View -...

Fedora 20 : kernel-3.13.5-202.fc20 (2014-3442)

This kernel update contains a number of CVE fixes, all users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible withou...

Novell ZENworks Configuration Management < 11.3.0.35304 PreBoot Service Directory Traversal

The remote host has a version of Novell ZENworks Configuration Management installed prior to 11 SP3 11.3.0.35304. It is, therefore, affected by a directory traversal vulnerability due to improper validation of an unspecified parameter of the PreBoot Service when reading files. A remote,...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : php5 vulnerabilities (USN-2126-1)

Bernd Melchers discovered that PHP's embedded libmagic library incorrectly handled indirect offset values. An attacker could use this issue to cause PHP to consume resources or crash, resulting in a denial of service. CVE-2014-1943 It was discovered that PHP incorrectly handled certain values whe...

Fedora 19 : xen-4.2.4-2.fc19 (2014-2862)

32-bit fix for 'Guest triggerable AMD CPU erratum may cause host hang', xen-4.2.4 also fixes XSA-60, CVE-2013-2212 update to xen-4.2.4 use-after-free in xccpupoolgetinfo under memory pressure Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : freeradius vulnerabilities (USN-2122-1)

It was discovered that FreeRADIUS incorrectly handled unix authentication. A remote user could successfully authenticate with an expired password. CVE-2011-4966 Pierre Carrier discovered that FreeRADIUS incorrectly handled rlmpap hash processing. An authenticated user could use this issue to caus...

Fedora 19 : mingw-gnutls-3.1.21-1.fc19 (2014-2565)

Version 3.1.21 released 2014-02-13 - libgnutls: Tolerate servers that sent the SUPPORTED ECC extension. - libgnutls: Reduced the TLS and DTLS version requirements for all ciphersuites that are not GCM. - libgnutls: When two initial keywords are specified then treat the second as having the '+'...

Ubuntu 12.04 LTS / 12.10 / 13.10 : thunderbird vulnerabilities (USN-2119-1)

Christian Holler, Terrence Cole, Jesse Ruderman, Gary Kwong, Eric Rescorla, Jonathan Kew, Dan Gohman, Ryan VanderMeulen and Sotaro Ikeda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker...

Ubuntu 12.04 LTS : linux-lts-raring vulnerabilities (USN-2112-1)

Vasily Kulikov reported a flaw in the Linux kernel's implementation of ptrace. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. CVE-2013-2929 Dave Jones and Vince Weaver reported a flaw in the Linux kernel's perf event subsystem that allows...

Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2108-1)

A flaw was discovered in the Linux kernel's compat ioctls for Adaptec AACRAID scsi raid devices. An unprivileged local user could send administrative commands to these devices potentially compromising the data stored on the device. CVE-2013-6383 mpd reported an information leak in the recvfrom,...

Fedora 20 : kernel-3.13.3-201.fc20 (2014-2576)

The 3.13.3 stable update contains a number of important fixes across the tree. The 3.13.2 rebase contains support for additional hardware, some new features and a number of important bug fixes across the tree. Fixes CVE-2014-0069 cifs: incorrect handling of bogus user pointers Note that Tenable...

Microsoft Windows SMB Registry : Windows 8.1 / Server 2012 R2 Service Pack Detection

It was possible to determine the service pack version of the Windows 8.1 / Server 2012 R2 system by reading the registry key 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion'. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72543; scriptversion"1.5";...

Fedora 20 : python-2.7.5-10.fc20 (2014-2394)

Buffer overflow fix. See upstream issue: http://bugs.python.org/issue20246 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducin...

Oracle Linux 5 : piranha (ELSA-2014-0174)

The remote Oracle Linux 5 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2014-0174 advisory. 0.8.4-26.1.0.1 - Replace web/web/RedHat.gif with updated image in tarball 0.8.4-26.1 - Resolves: 1061903 - require authentication for all HTTP methods 0.8.4-26 ...

Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2014-3002)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3002 advisory. - ipoutput: do skb ufo init for peeked non ufo skb as well Jiri Pirko Orabug: 17951078 CVE-2013-4470 - ip6output: do skb ufo init for peeked non ufo sk...

Fedora 19 : firefox-27.0-1.fc19 / xulrunner-27.0-1.fc19 (2014-2051)

See following page for changes: http://www.mozilla.org/en-US/firefox/27.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible witho...

Fedora 20 : libpng10-1.0.60-6.fc20 (2014-1778)

This update fixes an issue in which an image with a missing or empty palette could cause a crash of a libpng10-using application CVE-2013-6954. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Microsoft Internet Explorer Version Detection

The remote Windows host contains Internet Explorer, a web browser created by Microsoft. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72367; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptxrefname:"IAVT",...

Oracle Linux 6 : openldap (ELSA-2014-0126)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0126 advisory. 2.4.23-34.1 - fix: segfault on certain queries with rwm overlay 1058250 2.4.23-34 - fix: deadlock during SSLForceHandshake 996373 + revert...