FreeBSD : keycloak -- Multiple security fixes (7d7a28cd-7f5a-450a-852f-c49aaab3fa7e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7d7a28cd-7f5a-450a-852f-c49aaab3fa7e advisory. Keycloak reports: This update includes 5 security fixes: Tenable has extracted the preceding...

FreeBSD : chromium -- multiple security fixes (9dfca0cd-ab09-11ef-8c1c-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9dfca0cd-ab09-11ef-8c1c-a8a1599412c6 advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the preceding...

FreeBSD : python -- Information disclosure via pydoc -p: /getfile?key=path allows to read arbitrary file on the filesystem (f671c282-95ef-11eb-9c34-080027f515ea)

David Schworer reports : Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk directory traversal vulnerability. Moreover, even source code of Python modules can contain sensitive data like passwords. C Tenable Network Security, Inc. The...

FreeBSD : asterisk -- Remote crash in res_pjsip_diversion (6adf6ce0-44a6-11eb-95b7-001999f8d30b)

The Asterisk project reports : AST-2020-003: A crash can occur in Asterisk when a SIP message is received that has a History-Info header, which contains a tel-uri. AST-2020-004: A crash can occur in Asterisk when a SIP 181 response is received that has a Diversion header, which contains a tel-uri...

FreeBSD : drupal -- multiple vulnerabilities (7932548e-3427-11e6-8e82-002590263bf5)

Drupal Security Team reports : - Saving user accounts can sometimes grant the user all roles User module - Drupal 7 - Moderately Critical - Views can allow unauthorized users to see Statistics information Views module - Drupal 8 - Less Critical %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

FreeBSD : botan -- cryptographic vulnerability (f771880c-31cf-11e6-8e82-002590263bf5)

MITRE reports : The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FreeBSD : otrs -- Scheduler Process ID File Access (1e7f0c11-673a-11e5-98c8-60a44c524f57)

The OTRS project reports : An attacker with valid LOCAL credentials could access and manipulate the process ID file for bin/otrs.schduler.pl from the CLI. The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows local users to have an...

FreeBSD Ports: dropbear

The remote host is missing an update to the system as announced in the referenced advisory. VID eba70db4-6640-11e1-98af-00262d8b701d OpenVAS Vulnerability Test $ Description: Auto generated from VID eba70db4-6640-11e1-98af-00262d8b701d Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: proftpd, proftpd-mysql

The remote host is missing an update to the system as announced in the referenced advisory. VID 022a4c77-2da4-11e1-b356-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID 022a4c77-2da4-11e1-b356-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: spamdyke

The remote host is missing an update to the system as announced in the referenced advisory. Copyright C 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program...

FreeBSD : Unbound -- an empty error packet handling assertion failure (dc96ac1f-86b1-11e0-9e85-00215af774f0)

Unbound developer reports : NLnet Labs was notified of an error in Unbound's code-path for error replies which is triggered under special conditions. The error causes the program to abort. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. VID 7edac52a-66cd-11e0-9398-5d45f3aa24f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 7edac52a-66cd-11e0-9398-5d45f3aa24f0 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: tor

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: php5-imap

The remote host is missing an update to the system as announced in the referenced advisory. VID 1a0704e7-0edf-11e0-becc-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID 1a0704e7-0edf-11e0-becc-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: mediawiki

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: krb5

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: isolate

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: sudo

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: mahara

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2010 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...