Test ID:	1.3.6.1.4.1.25623.1.0.64442
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-801-1 (tiff)
Summary:	Ubuntu USN-801-1 (tiff)
Description:	The remote host is missing an update to tiff announced via advisory USN-801-1. Details follow: Tielei Wang and Tom Lane discovered that the TIFF library did not correctly handle certain malformed TIFF images. If a user or automated system were tricked into processing a malicious image, an attacker could execute arbitrary code with the privileges of the user invoking the program. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: libtiff4 3.7.4-1ubuntu3.6 Ubuntu 8.04 LTS: libtiff4 3.8.2-7ubuntu3.4 Ubuntu 8.10: libtiff4 3.8.2-11ubuntu0.8.10.3 Ubuntu 9.04: libtiff4 3.8.2-11ubuntu0.9.04.3 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-801-1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2347 Bugtraq: 20090713 [oCERT-2009-012] libtiff tools integer overflows (Google Search) http://www.securityfocus.com/archive/1/archive/1/504892/100/0/threaded http://www.ocert.org/advisories/ocert-2009-012.html Debian Security Information: DSA-1835 (Google Search) http://www.debian.org/security/2009/dsa-1835 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00663.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00724.html http://security.gentoo.org/glsa/glsa-200908-03.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:150 http://www.mandriva.com/security/advisories?name=MDVSA-2011:043 http://www.redhat.com/support/errata/RHSA-2009-1159.html http://www.ubuntu.com/usn/USN-801-1 BugTraq ID: 35652 http://www.securityfocus.com/bid/35652 http://osvdb.org/55821 http://osvdb.org/55822 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10988 http://www.securitytracker.com/id?1022539 http://secunia.com/advisories/35817 http://secunia.com/advisories/35811 http://secunia.com/advisories/35866 http://secunia.com/advisories/35883 http://secunia.com/advisories/35911 http://secunia.com/advisories/36194 http://www.vupen.com/english/advisories/2009/1870 http://www.vupen.com/english/advisories/2011/0621 XForce ISS Database: libtiff-rgb2ycbcr-tiff2rgba-bo(51688) http://xforce.iss.net/xforce/xfdb/51688 Common Vulnerability Exposure (CVE) ID: CVE-2009-1890 Bugtraq: 20091112 rPSA-2009-0142-1 httpd mod_ssl (Google Search) http://www.securityfocus.com/archive/1/archive/1/507852/100/0/threaded Bugtraq: 20091113 rPSA-2009-0142-2 httpd mod_ssl (Google Search) http://www.securityfocus.com/archive/1/archive/1/507857/100/0/threaded AIX APAR: PK91259 http://www-01.ibm.com/support/docview.wss?uid=swg1PK91259 AIX APAR: PK99480 http://www-01.ibm.com/support/docview.wss?uid=swg1PK99480 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html Debian Security Information: DSA-1834 (Google Search) http://www.debian.org/security/2009/dsa-1834 https://www.redhat.com/archives/fedora-package-announce/2009-August/msg01363.html http://security.gentoo.org/glsa/glsa-200907-04.xml HPdes Security Advisory: HPSBUX02612 http://marc.info/?l=bugtraq&m=129190899612998&w=2 HPdes Security Advisory: SSRT100345 http://www.mandriva.com/security/advisories?name=MDVSA-2009:149 RedHat Security Advisories: RHSA-2009:1148 https://rhn.redhat.com/errata/RHSA-2009-1148.html http://www.redhat.com/support/errata/RHSA-2009-1156.html SuSE Security Announcement: SUSE-SA:2009:050 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html http://www.ubuntu.com/usn/USN-802-1 BugTraq ID: 35565 http://www.securityfocus.com/bid/35565 http://osvdb.org/55553 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8616 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9403 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12330 http://www.securitytracker.com/id?1022509 http://secunia.com/advisories/35691 http://secunia.com/advisories/35721 http://secunia.com/advisories/35793 http://secunia.com/advisories/35865 http://secunia.com/advisories/37152 http://secunia.com/advisories/37221 http://www.vupen.com/english/advisories/2009/3184 Common Vulnerability Exposure (CVE) ID: CVE-2009-1891 http://marc.info/?l=apache-httpd-dev&m=124621326524824&w=2 http://marc.info/?l=apache-httpd-dev&m=124661528519546&w=2 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=534712 AIX APAR: PK91361 http://www-01.ibm.com/support/docview.wss?uid=swg1PK91361 HPdes Security Advisory: HPSBOV02683 http://marc.info/?l=bugtraq&m=130497311408250&w=2 HPdes Security Advisory: SSRT090208 http://osvdb.org/55782 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8632 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9248 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12361 http://www.securitytracker.com/id?1022529 http://secunia.com/advisories/35781 http://www.vupen.com/english/advisories/2009/1841 Common Vulnerability Exposure (CVE) ID: CVE-2008-2327 Bugtraq: 20080905 rPSA-2008-0268-1 libtiff (Google Search) http://www.securityfocus.com/archive/1/archive/1/496033/100/0/threaded Bugtraq: 20081031 VMSA-2008-0017 Updated ESX packages for libxml2, ucd-snmp, libtiff (Google Search) http://www.securityfocus.com/archive/1/archive/1/497962/100/0/threaded http://www.vmware.com/security/advisories/VMSA-2008-0017.html http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html http://lists.apple.com/archives/security-announce//2008/Nov/msg00001.html http://lists.apple.com/archives/security-announce/2008/Nov/msg00002.html Debian Security Information: DSA-1632 (Google Search) http://www.debian.org/security/2008/dsa-1632 https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00102.html https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00121.html http://security.gentoo.org/glsa/glsa-200809-07.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:184 http://www.redhat.com/support/errata/RHSA-2008-0847.html http://www.redhat.com/support/errata/RHSA-2008-0848.html http://www.redhat.com/support/errata/RHSA-2008-0863.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-265030-1 SuSE Security Announcement: SUSE-SR:2008:018 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-09/msg00004.html http://www.ubuntu.com/usn/usn-639-1 Cert/CC Advisory: TA08-260A http://www.us-cert.gov/cas/techalerts/TA08-260A.html BugTraq ID: 30832 http://www.securityfocus.com/bid/30832 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11489 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5514 http://secunia.com/advisories/32706 http://www.vupen.com/english/advisories/2008/2438 http://www.vupen.com/english/advisories/2008/2584 http://www.vupen.com/english/advisories/2008/2971 http://www.vupen.com/english/advisories/2008/3232 http://www.vupen.com/english/advisories/2008/3107 http://www.vupen.com/english/advisories/2008/2776 http://www.securitytracker.com/id?1020750 http://secunia.com/advisories/31610 http://secunia.com/advisories/31623 http://secunia.com/advisories/31668 http://secunia.com/advisories/31670 http://secunia.com/advisories/31698 http://secunia.com/advisories/31882 http://secunia.com/advisories/31838 http://secunia.com/advisories/32756 http://secunia.com/advisories/31982 http://www.vupen.com/english/advisories/2009/2143 Common Vulnerability Exposure (CVE) ID: CVE-2009-2285 http://www.openwall.com/lists/oss-security/2009/06/22/1 http://www.openwall.com/lists/oss-security/2009/06/23/1 http://www.openwall.com/lists/oss-security/2009/06/29/5 http://www.lan.st/showthread.php?t=1856&page=3 http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00142.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00161.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00230.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00655.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00714.html http://sunsolve.sun.com/search/document.do?assetkey=1-66-267808-1 http://www.ubuntulinux.org/support/documentation/usn/usn-797-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10145 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7049 http://secunia.com/advisories/35695 http://secunia.com/advisories/35716 http://secunia.com/advisories/35912 http://secunia.com/advisories/36831 http://secunia.com/advisories/38241 http://secunia.com/advisories/39135 http://www.vupen.com/english/advisories/2010/0173 http://www.vupen.com/english/advisories/2009/1637 http://www.vupen.com/english/advisories/2009/2727 Common Vulnerability Exposure (CVE) ID: CVE-2009-2295 Bugtraq: 20090702 [oCERT-2009-009] CamlImages integer overflows (Google Search) http://www.securityfocus.com/archive/1/archive/1/504696/100/0/threaded http://www.ocert.org/advisories/ocert-2009-009.html Debian Security Information: DSA-1832 (Google Search) http://www.debian.org/security/2009/dsa-1832 BugTraq ID: 35556 http://www.securityfocus.com/bid/35556 http://secunia.com/advisories/35819 http://www.vupen.com/english/advisories/2009/1874 Common Vulnerability Exposure (CVE) ID: CVE-2009-0858 Bugtraq: 20090226 djbdns misformats some long response packets; patch and example attack (Google Search) http://www.securityfocus.com/archive/1/archive/1/501294/100/0/threaded Bugtraq: 20090305 Re: djbdns misformats some long response packets; patch and example attack (Google Search) http://www.securityfocus.com/archive/1/archive/1/501340/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/501479/100/0/threaded http://marc.info/?l=djbdns&m=123554945710038 http://marc.info/?l=djbdns&m=123613000920446&w=2 http://it.slashdot.org/article.pl?sid=09/03/05/2014249 http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/ Debian Security Information: DSA-1831 (Google Search) http://www.debian.org/security/2009/dsa-1831 BugTraq ID: 33937 http://www.securityfocus.com/bid/33937 http://secunia.com/advisories/35820 XForce ISS Database: djbdns-response-packet-spoofing(49003) http://xforce.iss.net/xforce/xfdb/49003 Common Vulnerability Exposure (CVE) ID: CVE-2009-2334 Bugtraq: 20090708 CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information (Google Search) http://www.securityfocus.com/archive/1/archive/1/504795/100/0/threaded http://www.milw0rm.com/exploits/9110 http://corelabs.coresecurity.com/index.php?action=view&type=advisory&name=WordPress_Privileges_Unchecked Debian Security Information: DSA-1871 (Google Search) http://www.debian.org/security/2009/dsa-1871 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00632.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00676.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00597.html https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00608.html BugTraq ID: 35584 http://www.securityfocus.com/bid/35584 http://www.osvdb.org/55712 http://www.osvdb.org/55715 http://securitytracker.com/id?1022528 http://www.vupen.com/english/advisories/2009/1833 Common Vulnerability Exposure (CVE) ID: CVE-2009-2335 BugTraq ID: 35581 http://www.securityfocus.com/bid/35581 http://www.osvdb.org/55713 Common Vulnerability Exposure (CVE) ID: CVE-2009-2336 http://www.osvdb.org/55714 Common Vulnerability Exposure (CVE) ID: CVE-2008-0196 Bugtraq: 20080103 securityvulns.com russian vulnerabilities digest (Google Search) http://www.securityfocus.com/archive/1/archive/1/485786/100/0/threaded http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html http://securityvulns.ru/Sdocument762.html http://securityvulns.ru/Sdocument768.html http://securityvulns.ru/Sdocument772.html http://securityvulns.ru/Sdocument773.html http://websecurity.com.ua/1679/ http://websecurity.com.ua/1683/ http://websecurity.com.ua/1686/ http://websecurity.com.ua/1687/ http://securityreason.com/securityalert/3539 Common Vulnerability Exposure (CVE) ID: CVE-2009-2360 http://lists.horde.org/archives/announce/2009/000507.html Debian Security Information: DSA-1829 (Google Search) http://www.debian.org/security/2009/dsa-1829 BugTraq ID: 35573 http://www.securityfocus.com/bid/35573 http://secunia.com/advisories/35720 http://secunia.com/advisories/35769 http://www.vupen.com/english/advisories/2009/1784 XForce ISS Database: passwd-main-xss(51542) http://xforce.iss.net/xforce/xfdb/51542 Common Vulnerability Exposure (CVE) ID: CVE-2009-0040 Bugtraq: 20090312 rPSA-2009-0046-1 libpng (Google Search) http://www.securityfocus.com/archive/1/archive/1/501767/100/0/threaded Bugtraq: 20090529 VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues (Google Search) http://www.securityfocus.com/archive/1/archive/1/503912/100/0/threaded Bugtraq: 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server (Google Search) http://www.securityfocus.com/archive/1/archive/1/505990/100/0/threaded http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com http://lists.vmware.com/pipermail/security-announce/2009/000062.html http://lists.apple.com/archives/security-announce/2009/May/msg00002.html http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html Debian Security Information: DSA-1750 (Google Search) http://www.debian.org/security/2009/dsa-1750 Debian Security Information: DSA-1830 (Google Search) http://www.debian.org/security/2009/dsa-1830 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html http://security.gentoo.org/glsa/glsa-200903-28.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:051 http://www.mandriva.com/security/advisories?name=MDVSA-2009:075 http://www.mandriva.com/security/advisories?name=MDVSA-2009:083 http://www.redhat.com/support/errata/RHSA-2009-0315.html http://www.redhat.com/support/errata/RHSA-2009-0325.html http://www.redhat.com/support/errata/RHSA-2009-0333.html http://www.redhat.com/support/errata/RHSA-2009-0340.html http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952 http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1 SuSE Security Announcement: SUSE-SR:2009:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html SuSE Security Announcement: SUSE-SA:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html SuSE Security Announcement: SUSE-SA:2009:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html Cert/CC Advisory: TA09-218A http://www.us-cert.gov/cas/techalerts/TA09-218A.html CERT/CC vulnerability note: VU#649212 http://www.kb.cert.org/vuls/id/649212 BugTraq ID: 33827 http://www.securityfocus.com/bid/33827 BugTraq ID: 33990 http://www.securityfocus.com/bid/33990 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10316 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6458 http://secunia.com/advisories/34145 http://secunia.com/advisories/34210 http://secunia.com/advisories/34265 http://secunia.com/advisories/34272 http://secunia.com/advisories/34320 http://secunia.com/advisories/34388 http://secunia.com/advisories/34324 http://secunia.com/advisories/34462 http://secunia.com/advisories/34464 http://secunia.com/advisories/35074 http://secunia.com/advisories/35258 http://secunia.com/advisories/35302 http://secunia.com/advisories/35379 http://secunia.com/advisories/35386 http://secunia.com/advisories/36096 http://secunia.com/advisories/34137 http://secunia.com/advisories/34140 http://secunia.com/advisories/34143 http://secunia.com/advisories/34152 http://www.vupen.com/english/advisories/2009/0469 http://www.vupen.com/english/advisories/2009/0473 http://secunia.com/advisories/33970 http://secunia.com/advisories/33976 http://www.vupen.com/english/advisories/2009/0632 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2009/1451 http://www.vupen.com/english/advisories/2009/1462 http://www.vupen.com/english/advisories/2009/1522 http://www.vupen.com/english/advisories/2009/1560 http://www.vupen.com/english/advisories/2009/1621 http://www.vupen.com/english/advisories/2009/2172 XForce ISS Database: libpng-pointer-arrays-code-execution(48819) http://xforce.iss.net/xforce/xfdb/48819 Common Vulnerability Exposure (CVE) ID: CVE-2009-0352 https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:044 RedHat Security Advisories: RHSA-2009:0256 http://rhn.redhat.com/errata/RHSA-2009-0256.html http://www.redhat.com/support/errata/RHSA-2009-0257.html http://www.redhat.com/support/errata/RHSA-2009-0258.html SuSE Security Announcement: SUSE-SA:2009:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html http://www.ubuntu.com/usn/usn-717-1 http://www.ubuntulinux.org/support/documentation/usn/usn-741-1 BugTraq ID: 33598 http://www.securityfocus.com/bid/33598 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10699 http://secunia.com/advisories/33802 http://secunia.com/advisories/33831 http://secunia.com/advisories/33841 http://secunia.com/advisories/33846 http://secunia.com/advisories/34387 http://secunia.com/advisories/34417 http://secunia.com/advisories/34527 http://www.vupen.com/english/advisories/2009/0313 http://www.securitytracker.com/id?1021663 http://secunia.com/advisories/33799 http://secunia.com/advisories/33808 http://secunia.com/advisories/33809 http://secunia.com/advisories/33816 http://secunia.com/advisories/33869 Common Vulnerability Exposure (CVE) ID: CVE-2009-0353 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11193 Common Vulnerability Exposure (CVE) ID: CVE-2009-0652 http://lists.immunitysec.com/pipermail/dailydave/2009-February/005556.html http://lists.immunitysec.com/pipermail/dailydave/2009-February/005563.html http://www.blackhat.com/html/bh-dc-09/bh-dc-09-speakers.html#Marlinspike https://www.blackhat.com/presentations/bh-dc-09/Marlinspike/BlackHat-DC-09-Marlinspike-Defeating-SSL.pdf Debian Security Information: DSA-1797 (Google Search) http://www.debian.org/security/2009/dsa-1797 https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00683.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 http://www.redhat.com/support/errata/RHSA-2009-0436.html RedHat Security Advisories: RHSA-2009:0437 http://rhn.redhat.com/errata/RHSA-2009-0437.html SuSE Security Announcement: SUSE-SR:2009:010 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html http://www.ubuntulinux.org/support/documentation/usn/usn-764-1 BugTraq ID: 33837 http://www.securityfocus.com/bid/33837 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11396 http://secunia.com/advisories/34096 http://secunia.com/advisories/34894 http://secunia.com/advisories/34843 http://secunia.com/advisories/34844 http://secunia.com/advisories/35065 http://secunia.com/advisories/35042 http://www.vupen.com/english/advisories/2009/1125 XForce ISS Database: mozilla-firefox-homoglyph-spoofing(48974) http://xforce.iss.net/xforce/xfdb/48974 Common Vulnerability Exposure (CVE) ID: CVE-2009-0771 Debian Security Information: DSA-1751 (Google Search) http://www.debian.org/security/2009/dsa-1751 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11314 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5250 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6163 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6196 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6755 http://www.securitytracker.com/id?1021795 http://secunia.com/advisories/34383 Common Vulnerability Exposure (CVE) ID: CVE-2009-0772 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5703 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5945 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6097 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6811 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9609 Common Vulnerability Exposure (CVE) ID: CVE-2009-0773 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10491 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5856 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5980 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6141 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6708 Common Vulnerability Exposure (CVE) ID: CVE-2009-0774 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11138 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5947 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6057 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6121 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6945 Common Vulnerability Exposure (CVE) ID: CVE-2009-0776 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5956 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6017 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6191 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7390 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9241 http://www.securitytracker.com/id?1021797 Common Vulnerability Exposure (CVE) ID: CVE-2009-1302 http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 BugTraq ID: 34656 http://www.securityfocus.com/bid/34656 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10106 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5527 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6070 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6170 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7030 http://www.securitytracker.com/id?1022090 http://secunia.com/advisories/34758 http://secunia.com/advisories/34780 http://secunia.com/advisories/35602 Common Vulnerability Exposure (CVE) ID: CVE-2009-1303 http://www.redhat.com/support/errata/RHSA-2009-1125.html http://www.redhat.com/support/errata/RHSA-2009-1126.html http://www.ubuntu.com/usn/usn-782-1 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5810 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5992 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6151 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6646 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9455 http://secunia.com/advisories/35536 Common Vulnerability Exposure (CVE) ID: CVE-2009-1307 https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10972 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5933 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6154 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6266 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:7008 http://www.securitytracker.com/id?1022093 http://secunia.com/advisories/35561 http://secunia.com/advisories/35882 Common Vulnerability Exposure (CVE) ID: CVE-2009-1832 Debian Security Information: DSA-1820 (Google Search) http://www.debian.org/security/2009/dsa-1820 https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html RedHat Security Advisories: RHSA-2009:1095 https://rhn.redhat.com/errata/RHSA-2009-1095.html http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 http://sunsolve.sun.com/search/document.do?assetkey=1-26-265068-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020800.1-1 BugTraq ID: 35326 http://www.securityfocus.com/bid/35326 BugTraq ID: 35371 http://www.securityfocus.com/bid/35371 http://osvdb.org/55148 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10237 http://securitytracker.com/id?1022376 http://www.securitytracker.com/id?1022397 http://secunia.com/advisories/35331 http://secunia.com/advisories/35431 http://secunia.com/advisories/35439 http://secunia.com/advisories/35440 http://secunia.com/advisories/35468 http://secunia.com/advisories/35415 http://www.vupen.com/english/advisories/2009/1572 http://www.vupen.com/english/advisories/2009/2152 Common Vulnerability Exposure (CVE) ID: CVE-2009-1392 RedHat Security Advisories: RHSA-2009:1096 http://rhn.redhat.com/errata/RHSA-2009-1096.html BugTraq ID: 35370 http://www.securityfocus.com/bid/35370 http://osvdb.org/55144 http://osvdb.org/55145 http://osvdb.org/55146 http://osvdb.org/55147 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9501 http://secunia.com/advisories/35428 Common Vulnerability Exposure (CVE) ID: CVE-2009-1836 http://research.microsoft.com/apps/pubs/default.aspx?id=79323 http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf BugTraq ID: 35380 http://www.securityfocus.com/bid/35380 http://osvdb.org/55160 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11764 http://www.securitytracker.com/id?1022396 Common Vulnerability Exposure (CVE) ID: CVE-2009-1838 BugTraq ID: 35383 http://www.securityfocus.com/bid/35383 http://osvdb.org/55157 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11080 Common Vulnerability Exposure (CVE) ID: CVE-2009-1841 BugTraq ID: 35373 http://www.securityfocus.com/bid/35373 http://osvdb.org/55159 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9815 Common Vulnerability Exposure (CVE) ID: CVE-2009-1185 Bugtraq: 20090417 rPSA-2009-0063-1 udev (Google Search) http://www.securityfocus.com/archive/1/archive/1/502752/100/0/threaded Bugtraq: 20090711 VMSA-2009-0009 ESX Service Console updates for udev, sudo, and curl (Google Search) http://www.securityfocus.com/archive/1/archive/1/504849/100/0/threaded http://www.milw0rm.com/exploits/8572 http://lists.vmware.com/pipermail/security-announce/2009/000060.html https://launchpad.net/bugs/cve/2009-1185 http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0063 Debian Security Information: DSA-1772 (Google Search) http://www.debian.org/security/2009/dsa-1772 https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00463.html https://www.redhat.com/archives/fedora-package-announce/2009-April/msg00462.html http://www.gentoo.org/security/en/glsa/glsa-200904-18.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:103 http://www.mandriva.com/security/advisories?name=MDVSA-2009:104 http://www.redhat.com/support/errata/RHSA-2009-0427.html http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.446399 SuSE Security Announcement: SUSE-SA:2009:020 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00006.html SuSE Security Announcement: SUSE-SA:2009:025 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00012.html http://www.ubuntu.com/usn/usn-758-1 BugTraq ID: 34536 http://www.securityfocus.com/bid/34536 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10925 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5975 http://www.securitytracker.com/id?1022067 http://secunia.com/advisories/34731 http://secunia.com/advisories/34750 http://secunia.com/advisories/34753 http://secunia.com/advisories/34771 http://secunia.com/advisories/34785 http://secunia.com/advisories/34787 http://secunia.com/advisories/34801 http://secunia.com/advisories/34776 http://secunia.com/advisories/35766 http://www.vupen.com/english/advisories/2009/1053 http://www.vupen.com/english/advisories/2009/1865 Common Vulnerability Exposure (CVE) ID: CVE-2009-0034 Bugtraq: 20090129 rPSA-2009-0021-1 sudo (Google Search) http://www.securityfocus.com/archive/1/archive/1/500546/100/0/threaded http://www.mandriva.com/security/advisories?name=MDVSA-2009:033 http://www.redhat.com/support/errata/RHSA-2009-0267.html BugTraq ID: 33517 http://www.securityfocus.com/bid/33517 http://osvdb.org/51736 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10856 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6462 http://www.securitytracker.com/id?1021688 http://secunia.com/advisories/33753 http://secunia.com/advisories/33885 http://secunia.com/advisories/33840 Common Vulnerability Exposure (CVE) ID: CVE-2009-0037 Bugtraq: 20090312 rPSA-2009-0042-1 curl (Google Search) http://www.securityfocus.com/archive/1/archive/1/501757/100/0/threaded http://www.withdk.com/2009/03/03/curllibcurl-redirect-arbitrary-file-access/ http://www.withdk.com/archives/Libcurl_arbitrary_file_access.pdf http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html Debian Security Information: DSA-1738 (Google Search) http://www.debian.org/security/2009/dsa-1738 http://security.gentoo.org/glsa/glsa-200903-21.xml http://www.redhat.com/support/errata/RHSA-2009-0341.html http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.476602 SuSE Security Announcement: SUSE-SR:2009:006 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00001.html http://www.ubuntu.com/usn/USN-726-1 BugTraq ID: 33962 http://www.securityfocus.com/bid/33962 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11054 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6074 http://www.securitytracker.com/id?1021783 http://secunia.com/advisories/34138 http://secunia.com/advisories/34202 http://secunia.com/advisories/34255 http://secunia.com/advisories/34259 http://secunia.com/advisories/34237 http://secunia.com/advisories/34251 http://secunia.com/advisories/34399 http://www.vupen.com/english/advisories/2009/0581 XForce ISS Database: curl-location-security-bypass(49030) http://xforce.iss.net/xforce/xfdb/49030 Common Vulnerability Exposure (CVE) ID: CVE-2009-1422 HPdes Security Advisory: HPSBGN02446 http://marc.info/?l=bugtraq&m=124751363528317&w=2 HPdes Security Advisory: SSRT090111 http://www.securitytracker.com/id?1022536 http://www.vupen.com/english/advisories/2009/1869 Common Vulnerability Exposure (CVE) ID: CVE-2009-1423 XForce ISS Database: procurve-vpn-dos(51689) http://xforce.iss.net/xforce/xfdb/51689 Common Vulnerability Exposure (CVE) ID: CVE-2009-1424 Common Vulnerability Exposure (CVE) ID: CVE-2009-1425 BugTraq ID: 35653 http://www.securityfocus.com/bid/35653 XForce ISS Database: procurve-httpd-dos(51691) http://xforce.iss.net/xforce/xfdb/51691 Common Vulnerability Exposure (CVE) ID: CVE-2009-1959 http://www.openwall.com/lists/oss-security/2009/05/29/3 http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/ https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00146.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:133 SuSE Security Announcement: SUSE-SR:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html http://www.ubuntu.com/usn/usn-800-1 BugTraq ID: 35399 http://www.securityfocus.com/bid/35399 http://www.securitytracker.com/id?1022410 http://secunia.com/advisories/35685 http://secunia.com/advisories/35812 http://secunia.com/advisories/36152 http://www.vupen.com/english/advisories/2009/1596 XForce ISS Database: irssi-eventwallops-dos(51184) http://xforce.iss.net/xforce/xfdb/51184
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: