Ubuntu 10.04 LTS / 11.10 / 12.04 LTS : qt4-x11 vulnerability (USN-1628-1)

Juliano Rizzo and Thai Duong discovered a flaw in the Transport Layer Security TLS protocol when it is used with data compression. If an attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. This update disables TLS data compression ...

Ubuntu 8.04 LTS / 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : apache2 vulnerabilities (USN-1627-1)

It was discovered that the modnegotiation module incorrectly handled certain filenames, which could result in browsers becoming vulnerable to cross-site scripting attacks when processing the output. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output durin...

Fedora 17 : rt3-3.8.15-1.fc17 (2012-17174)

---------------------------------------------------------------------- ---------- ChangeLog : - Sun Oct 28 2012 Ralf Corsepius - 3.8.15-1 - Upstream update RH BZ 870407, CVE-2012-4730, CVE-2012-4732, CVE-2012-4734, CVE-2012-4735, CVE-2012-4884. - Sat Oct 6 2012 Ralf Corsepius - 3.8.14-1 - Upstrea...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : mysql-5.1, mysql-5.5, mysql-dfsg-5.1 vulnerabilities (USN-1621-1)

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.1.66 in Ubuntu 10.04 LTS and Ubuntu 11.10. Ubuntu 12.04 LTS and Ubuntu 12.10 have been updated to MySQL 5.5.28. In addition to security fixes, th...

ManageEngine OpStor Detection

The remote web server hosts ManageEngine OpStor, a storage management application written in Java. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62782; scriptversion"1.6"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"ManageEngine OpStor Detection";...

Ubuntu 12.04 LTS : webkit vulnerabilities (USN-1617-1)

A large number of security issues were discovered in the WebKit browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Symantec Ghost Solution Suite Installed

Symantec Solution Ghost Suite, a system management and computer imaging application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62715; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate",...

Ubuntu 10.04 LTS / 11.04 : python3.1 vulnerabilities (USN-1616-1)

It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit this to execute arbitrary code. This issue only affected Ubuntu 10.04 LTS. CVE-2008-5983 It was discovered that th...

Fedora 17 : python-django-horizon-2012.1.3-1.fc17 (2012-16148)

Latest bugfix update for the essex branch CVE-2012-3540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Adobe Bridge Installed

Adobe Bridge is installed on the remote Windows host. Bridge is used to organize creative assets, and provide centralized access for applications in the Adobe Creative Suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62681; scriptversion"1.13";...

Ubuntu 12.04 LTS / 12.10 : ruby1.9.1 vulnerabilities (USN-1614-1)

Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. USN-1602-1 fixed these vulnerabilities in other Ubuntu releases. This update provides the...

Fedora 18 : bind-dyndb-ldap-2.0-0.3.20121009git6a86b1.fc18 / bind-9.9.2-2.fc18 / etc (2012-16022)

Update to the latest BIND packages to fix CVE-2012-5166 and incorporate other fixes from upstream. Packages dhcp, bind-dyndb-ldap and dnsperf were rebuilt. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

MySQL 5.1 < 5.1.66 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.66 and is, therefore, affected by vulnerabilities in the following components : - Server Installation - Server - Server Optimizer - GIS Extension C Tenable Network Security, Inc. include"compat.inc"; if description...

Fedora 18 : java-1.7.0-openjdk-1.7.0.9-2.3.3.fc18 (2012-16285)

This update fixes numerous security issues in the OpenJDK packages that are fixed as part of the October 2012 Java CPU. Fixed bugs: 856124, 865346, 865348, 865350, 865352, 865354, 865357, 865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514, 865519, 865531, 865541, 865568 Note...

Fedora 16 : java-1.6.0-openjdk-1.6.0.0-68.1.11.5.fc16 / java-1.7.0-openjdk-1.7.0.9-2.3.3.fc16 (2012-16351)

This update fixes numerous security issues in the OpenJDK packages that are fixed as part of the October 2012 Java CPU. Fixed bugs: 856124, 865346, 865348, 865350, 865352, 865354, 865357, 865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514, 865519, 865531, 865541, 865568 Note...

Investintech Able2Doc Detection

The remote host has an install of Investintech Able2Doc, which is a PDF converter. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62622; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Investintech...

Investintech Able2Extract Detection

The remote host has an install of Investintech Able2Extract, a PDF converter. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62624; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Investintech...

Fedora 17 : java-1.7.0-openjdk-1.7.0.9-2.3.3.fc17 (2012-16346)

This update fixes numerous security issues in the OpenJDK packages that are fixed as part of the October 2012 Java CPU. Fixed bugs: 856124, 865346, 865348, 865350, 865352, 865354, 865357, 865359, 865363, 865365, 865370, 865428, 865471, 865434, 865511, 865514, 865519, 865531, 865541, 865568 Note...

Ubuntu 8.04 LTS : python2.4 vulnerabilities (USN-1613-2)

USN-1613-1 fixed vulnerabilities in Python 2.5. This update provides the corresponding updates for Python 2.4. It was discovered that Python would prepend an empty string to sys.path under certain circumstances. A local attacker with write access to the current working directory could exploit thi...

Fedora 16 : ruby-1.8.7.358-4.fc16 (2012-15507)

Some security flaws were found on ruby currently shipped on Fedora 17 where malicious user can bypass safe mechanize by raising exception intentionally and make arbitrary strings tainted. This flaw were now registered as CVE-2012-4464 and CVE-2012-4466. Note that CVE-2012-4464 is basically the sa...