Fedora 16 : maniadrive-1.2-32.fc16.7 / php-5.3.15-1.fc16 / php-eaccelerator-0.9.6.1-9.fc16.7 (2012-10908)

The PHP development team would like to announce the immediate availability of PHP 5.3.15. This release fixes over 30 bugs and includes a fix for a security related overflow issue in the stream implementation CVE-2012-2688. All users of PHP are encouraged to upgrade to PHP 5.3.15. Full changelog:...

Fedora 17 : moodle-2.2.4-1.fc17 (2012-11039)

Latest upstreams to address security issues. CVE-2012-3387 CVE-2012-3388 CVE-2012-3389 CVE-2012-3390 CVE-2012-3391 CVE-2012-3392 CVE-2012-3393 CVE-2012-3394 CVE-2012-3395 CVE-2012-3396 CVE-2012-3397 CVE-2012-3398 Note that Tenable Network Security has extracted the preceding description block...

Scientific Linux Security Update : nfs-utils-lib on SL4.x i386/x86_64

Tenable Network Security discovered a stack-based buffer overflow flaw in the RPC library used by nfs-utils-lib. A remote unauthenticated attacker who can access an application linked against nfs-utils-lib could trigger this flaw and cause the application to crash. On Red Hat Enterprise Linux 4 i...

Scientific Linux Security Update : ipw3945 on SL5.x i386/x86_64

SL 5.x %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid60320; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/01/14";...

Scientific Linux Security Update : libvirt on SL5.x, SL6.x i386/x86_64

A flaw was found in the way libvirtd handled error reporting for concurrent connections. A remote attacker able to establish read-only connections to libvirtd on a server could use this flaw to crash libvirtd. CVE-2011-1486 libvirtd must be restarted 'service libvirtd restart' for this update to...

Fedora 16 : bacula-5.0.3-31.fc16 (2012-10929)

Removed examples. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

Fedora 16 : puppet-2.6.17-2.fc16 (2012-10897)

This is an upstream security release. It addresses a number of issues found in puppet-2.6.x. The Red Hat security team has rated this update as having low security impact. Refer to the upstream release notes and bugzilla entries for further details...

Fedora 17 : cifs-utils-5.5-2.fc17 (2012-10421)

This update enables some extra security features in the executables specifically, PIE and RELRO support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Fedora 17 : asterisk-10.5.2-1.fc17 (2012-10324)

The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are released as versions 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones. These releases are available for immediate download at...

StudioLine Photo Basic Detection

The remote host has StudioLine Photo Basic installed. StudioLine Photo Basic is an image editing software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid60021; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Mac OS X Admin Group User List

Using the supplied credentials, Nessus was able to extract the member list of the 'Admin' and 'Wheel' groups. Members of these groups have administrative access to the remote system. TRUSTED...

Ubuntu 8.04 LTS : linux vulnerabilities (USN-1507-1)

A flaw was found in the Linux kernel's KVM Kernel Virtual Machine virtual cpu setup. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. CVE-2012-1601 An error was found in the Linux kernel's IPv6 netfilter when connection tracking is enabled. A...

Tenable Appliance Web Detection

A Tenable Appliance Web interface was detected on the remote host. C Tenable, Inc. include"compat.inc"; if description scriptid58231; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/08/09"; scriptnameenglish:"Tenable Appliance Web Detection";...

Tenable Appliance Web Authentication Bypass

The version of Tenable Appliance running on the remote host has an authentication bypass vulnerability. A remote, unauthenticated attacker could exploit this to gain administrative access to the web interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : icedtea-web, openjdk-6 vulnerabilities (USN-1505-1)

It was discovered that multiple flaws existed in the CORBA Common Object Request Broker Architecture implementation in OpenJDK. An attacker could create a Java application or applet that used these flaws to bypass Java sandbox restrictions or modify immutable object data. CVE-2012-1711,...

Ubuntu 11.10 / 12.04 LTS : rhythmbox vulnerability (USN-1503-1)

Hans Spaans discovered that the Context plugin in Rhythmbox created a temporary directory in an insecure manner. A local attacker could exploit this to execute arbitrary code as the user invoking the program. The Context plugin is disabled by default in Ubuntu. Note that Tenable Network Security...

Fedora 16 : wireshark-1.6.8-1.fc16 (2012-10175)

Update to latest upstream release, fixing few security bugs. CVE-2012-2392: Infinite and large loops in ANSI MAP, ASF, IEEE 802.11, IEEE 802.3, and LTP dissectors. CVE-2012-2393: Memory allocation flaw in the DIAMETER dissector. CVE-2012-2394: Denial of service crash due memory alignment problem ...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : tiff vulnerabilities (USN-1498-1)

It was discovered that the TIFF library incorrectly handled certain malformed TIFF images. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with...

Fedora 16 : boost-1.47.0-7.fc16 (2012-9029)

This update fixes a bug in Boost.Pool, which could under certain circumstances overflow allocated chunk size. This could have security implications for applications that use Boost pool without sanitizing pool parameters. - Add a sub-package boost-math with math-related bits from Boost.TR1. This...

Ubuntu 11.10 / 12.04 LTS : nova vulnerabilities (USN-1497-1)

Matthias Weckbecker discovered that, when using the OpenStack API to setup libvirt-based hypervisors, an authenticated user could inject files in arbitrary locations on the file system of the host running Nova. A remote attacker could use this to gain root privileges. This issue only affects Ubun...