Lucene search
+L

402 matches found

Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.24 views

SuSE9 Security Update : libtiff (YOU Patch Number 12470)

This update of the tiff package fixes various integer overflows in the tools. CVE-2009-2347 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41320;...

9.3CVSS8.2AI score0.04152EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.19 views

SuSE9 Security Update : resmgr (YOU Patch Number 9434)

This update of resmgr improves the stability of determining terminal names. Without this fix it is possible for users to fake terminals, and therefore login types, in the context of the resmgr. This is just a minor issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description o...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.35 views

SuSE9 Security Update : nagios-www (YOU Patch Number 10984)

An integer overflow exists within the handling of HTTP headers by CGIs. This could lead to arbitrary code execution by remote attackers on behalf of the Nagios CGI scripts. CVE-2006-2162 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of...

5CVSS8.9AI score0.04728EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.26 views

SuSE9 Security Update : freeswan (YOU Patch Number 12445)

Two vulnerabilities in the freeswan ASN.1 parser when handling RDNs, UTCTIME and GENERALIZEDTIME strings could lead to remote crashes of the pluto daemon CVE-2009-2185. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

5CVSS5.4AI score0.02372EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.42 views

SuSE9 Security Update : Apache 2 (YOU Patch Number 12000)

Apache2 contains a copy of the pcre library. Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code...

6.8CVSS6AI score0.04077EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.24 views

SuSE9 Security Update : mailman (YOU Patch Number 12224)

This update of mailman fixes a cross-site scripting bug CVE-2008-0564 and a mistake in translation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41233;...

4.3CVSS5.2AI score0.01919EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.24 views

SuSE9 Security Update : yast2-backup (YOU Patch Number 12279)

This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

7.2CVSS5.4AI score0.00475EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.26 views

SuSE9 Security Update : XFree86-server (YOU Patch Number 12058)

The previous XFree86 security update contained a flaw. Due to this some applications using the shared memory extension did not work properly anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.26 views

SuSE9 Security Update : snort (YOU Patch Number 11055)

This update fixes an evasion attack on URL parsing. The faulty code is in the httpinspect preprocessor. CVE-2006-2769 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

5CVSS5.4AI score0.10813EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.33 views

SuSE9 Security Update : libexif (YOU Patch Number 11555)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

9.3CVSS5.3AI score0.13162EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.42 views

SuSE9 Security Update : the webdav apache module (YOU Patch Number 9363)

A vulnerability in the WebDAV module has been fixed. A remote attacker could crash a server process, leading to a Denial of Service scenario. Only installations configured for WebDAV access were affected. See http://nagoya.apache.org/bugzilla/showbug.cgi?id=31183. CVE-2004-0809 has been assigned ...

5CVSS5.3AI score0.17155EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.30 views

SuSE9 Security Update : XFree86 (YOU Patch Number 12170)

This update fixes multiple vulnerabilities reported by iDefense : - RENDER Extension heap buffer overflow. CVE-2008-2360 - RENDER Extension crash. CVE-2008-2361 - RENDER Extension memory corruption . CVE-2008-2362 - MIT-SHM arbitrary memory read. CVE-2008-1379 - RECORD and Security extensions...

10CVSS10AI score0.03566EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.13 views

SuSE9 Security Update : findutils-locate (YOU Patch Number 11653)

The cronjob that deletes old core files can be tricked to delete arbitrary files if DELETEOLDCORE is set to yes in /etc/sysconfig/cron. By default, the variable is set to no. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

5.5AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.34 views

SuSE9 Security Update : cups (YOU Patch Number 12099)

This update of cups fixes a denial-of-service bug double-free CVE-2008-0882 and specially crafted IPP packets can make cups crash too. CVE-2008-0596, CVE-2008-0597 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

10CVSS5.2AI score0.05793EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.50 views

SuSE9 Security Update : wget (YOU Patch Number 11090)

This update fixes a security bug in wget, where evil servers could send terminal escape codes to the user calling wget. This would only affect interactive sessions. CVE-2004-1488 Additionally a previous '.file' fix was found to be buggy and replaced. This bug could lead to '.directories' not bein...

5CVSS5.3AI score0.11919EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.22 views

SuSE9 Security Update : libungif (YOU Patch Number 10556)

This update fixes the following security issues : - specially crafted GIF files could crash applications. CVE-2005-2974 - specially crafted GIF files could overwrite memory which potentially allowed to execute arbitrary code. CVE-2005-3350 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

7.5CVSS5.8AI score0.04418EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.24 views

SuSE9 Security Update : libvorbis (YOU Patch Number 11932)

Specially crafted OGG files could crash libvorbis or make it run into an endless loop. CVE-2007-4029, CVE-2007-4065, CVE-2007-4066 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

6.8CVSS5.2AI score0.01842EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.31 views

SuSE9 Security Update : PostgreSQL (YOU Patch Number 12383)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

4CVSS5.3AI score0.10242EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.25 views

SuSE9 Security Update : SLES9-SP4: Security update for bind (YOU Patch Number 11717)

CVE-2007-2926, cryptographically weak query ids RT 16915. Applied fix extracted from 9.2.8-P1 version. - version update to 9.3.x because ISC will no longer maintain version 9.2.x %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

4.3CVSS6.6AI score0.1309EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.32 views

SuSE9 Security Update : vim and gvim (YOU Patch Number 11722)

This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

6.8CVSS8.5AI score0.04179EPSS
SaveExploits1References2
Rows per page
Query Builder