6.8 - USN-1416-1

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	tiff vulnerabilities

Informations
Name	USN-1416-1	First vendor Publication	2012-04-04
Vendor	Ubuntu	Last vendor Modification	2012-04-04
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P)
Cvss Base Score	6.8	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.10 - Ubuntu 10.04 LTS - Ubuntu 8.04 LTS

Summary:

The TIFF library could be made to crash or run programs as your login if it opened a specially crafted file.

Software Description: - tiff: Tag Image File Format (TIFF) library

Details:

Alexander Gavrun discovered that the TIFF library incorrectly allocated space for a tile. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could execute arbitrary code with user privileges, or crash the application, leading to a denial of service. (CVE-2012-1173)

It was discovered that the tiffdump utility incorrectly handled directory data structures with many directory entries. If a user or automated system were tricked into opening a specially crafted TIFF image, a remote attacker could crash the application, leading to a denial of service, or possibly execute arbitrary code with user privileges. This issue only applied to Ubuntu 8.04 LTS, Ubuntu 10.04 LTS, Ubuntu 10.10 and Ubuntu 11.04. (CVE-2010-4665)

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.10:
libtiff4 3.9.5-1ubuntu1.1

Ubuntu 11.04:
libtiff4 3.9.4-5ubuntu6.1

Ubuntu 10.10:
libtiff4 3.9.4-2ubuntu0.5

Ubuntu 10.04 LTS:
libtiff4 3.9.2-2ubuntu0.8

Ubuntu 8.04 LTS:
libtiff4 3.8.2-7ubuntu3.10

In general, a standard system update will make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1416-1
CVE-2010-4665, CVE-2012-1173

Package Information:
https://launchpad.net/ubuntu/+source/tiff/3.9.5-1ubuntu1.1
https://launchpad.net/ubuntu/+source/tiff/3.9.4-5ubuntu6.1
https://launchpad.net/ubuntu/+source/tiff/3.9.4-2ubuntu0.5
https://launchpad.net/ubuntu/+source/tiff/3.9.2-2ubuntu0.8
https://launchpad.net/ubuntu/+source/tiff/3.8.2-7ubuntu3.10

Original Source

Url : http://www.ubuntu.com/usn/USN-1416-1

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17498

Oval ID:	oval:org.mitre.oval:def:17498
Title:	USN-1416-1 -- tiff vulnerabilities
Description:	The TIFF library could be made to crash or run programs as your login if it opened a specially crafted file.
Family:	unix	Class:	patch
Reference(s):	USN-1416-1 CVE-2012-1173 CVE-2010-4665	Version:	7
Platform(s):	Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.10 Ubuntu 10.04 Ubuntu 8.04	Product(s):	tiff
Definition Synopsis:
Release section Ubuntu 11.10 is installed AND libtiff4 DPKG is earlier than 3.9.5-1ubuntu1.1 AND Release section Ubuntu 11.04 is installed AND libtiff4 DPKG is earlier than 3.9.4-5ubuntu6.1 AND Release section Ubuntu 10.10 is installed AND libtiff4 DPKG is earlier than 3.9.4-2ubuntu0.5 AND Release section Ubuntu 10.04 is installed AND libtiff4 DPKG is earlier than 3.9.2-2ubuntu0.8 AND Release section Ubuntu 8.04 is installed AND libtiff4 DPKG is earlier than 3.8.2-7ubuntu3.10

Definition Id: oval:org.mitre.oval:def:18472

Oval ID:	oval:org.mitre.oval:def:18472
Title:	DSA-2447-1 tiff - integer overflow
Description:	Alexander Gavrun discovered an integer overflow in the TIFF library in the parsing of the TileSize entry, which could result in the execution of arbitrary code if a malformed image is opened.
Family:	unix	Class:	patch
Reference(s):	DSA-2447-1 CVE-2012-1173	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	tiff
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND tiff DPKG is earlier than 3.9.4-5+squeeze4

Definition Id: oval:org.mitre.oval:def:21264

Oval ID:	oval:org.mitre.oval:def:21264
Title:	RHSA-2012:0468: libtiff security update (Important)
Description:	Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0468-02 CESA-2012:0468 CVE-2012-1173	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	libtiff
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section libtiff is earlier than 0:3.8.2-14.el5_8 AND libtiff-devel is earlier than 0:3.8.2-14.el5_8 AND Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section libtiff is earlier than 0:3.9.4-5.el6_2 AND libtiff-static is earlier than 0:3.9.4-5.el6_2 AND libtiff-devel is earlier than 0:3.9.4-5.el6_2

Definition Id: oval:org.mitre.oval:def:22143

Oval ID:	oval:org.mitre.oval:def:22143
Title:	RHSA-2010:0519: libtiff security update (Important)
Description:	Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0519-01 CESA-2010:0519 CVE-2010-1411 CVE-2010-2481 CVE-2010-2483 CVE-2010-2595 CVE-2010-2597 CVE-2010-4665	Version:	81
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	libtiff
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section libtiff is earlier than 0:3.8.2-7.el5_5.5 AND libtiff-devel is earlier than 0:3.8.2-7.el5_5.5

Definition Id: oval:org.mitre.oval:def:22870

Oval ID:	oval:org.mitre.oval:def:22870
Title:	ELSA-2010:0519: libtiff security update (Important)
Description:	Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted TIFF file containing a directory data structure with many directory entries.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0519-01 CVE-2010-1411 CVE-2010-2481 CVE-2010-2483 CVE-2010-2595 CVE-2010-2597 CVE-2010-4665	Version:	29
Platform(s):	Oracle Linux 5	Product(s):	libtiff
Definition Synopsis:
Oracle Linux 5.x rpm test libtiff is earlier than 0:3.8.2-7.el5_5.5 AND libtiff-devel is earlier than 0:3.8.2-7.el5_5.5

Definition Id: oval:org.mitre.oval:def:22893

Oval ID:	oval:org.mitre.oval:def:22893
Title:	DEPRECATED: ELSA-2012:0468: libtiff security update (Important)
Description:	Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0468-02 CVE-2012-1173	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libtiff
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test libtiff is earlier than 0:3.8.2-14.el5_8 AND libtiff-devel is earlier than 0:3.8.2-14.el5_8 OR rpm test Oracle Linux 6.x AND rpm test libtiff is earlier than 0:3.9.4-5.el6_2 AND libtiff-static is earlier than 0:3.9.4-5.el6_2 AND libtiff-devel is earlier than 0:3.9.4-5.el6_2

Definition Id: oval:org.mitre.oval:def:23728

Oval ID:	oval:org.mitre.oval:def:23728
Title:	ELSA-2012:0468: libtiff security update (Important)
Description:	Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handled by the (1) gtTileSeparate or (2) gtStripSeparate function, leading to a heap-based buffer overflow.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0468-02 CVE-2012-1173	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libtiff
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test libtiff is earlier than 0:3.8.2-14.el5_8 AND libtiff-devel is earlier than 0:3.8.2-14.el5_8 OR rpm test Oracle Linux 6.x AND rpm test libtiff is earlier than 0:3.9.4-5.el6_2 AND libtiff-static is earlier than 0:3.9.4-5.el6_2 AND libtiff-devel is earlier than 0:3.9.4-5.el6_2

Definition Id: oval:org.mitre.oval:def:25737

Oval ID:	oval:org.mitre.oval:def:25737
Title:	SUSE-SU-2013:1639-1 -- Security update for libtiff
Description:	This tiff LTSS roll up update fixes several security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1639-1 CVE-2013-4232 CVE-2013-4231 CVE-2013-4243 CVE-2013-4244 CVE-2013-1961 CVE-2013-1960 CVE-2012-4447 CVE-2012-4564 CVE-2012-5581 CVE-2012-3401 CVE-2012-2113 CVE-2012-2088 CVE-2012-1173	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	libtiff
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section libtiff RPM is earlier than 0:3.8.2-5.36.1 AND libtiff-devel RPM is earlier than 0:3.8.2-5.36.1 AND tiff RPM is earlier than 0:3.8.2-5.36.1 AND libtiff-32bit RPM is earlier than 0:3.8.2-5.36.1 AND libtiff-devel-32bit RPM is earlier than 0:3.8.2-5.36.1

Definition Id: oval:org.mitre.oval:def:27419

Oval ID:	oval:org.mitre.oval:def:27419
Title:	DEPRECATED: ELSA-2012-0468 -- libtiff security update (important)
Description:	[3.9.4-5] - Add fix for CVE-2012-1173 Resolves: #CVE-2012-1173
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0468 CVE-2012-1173	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libtiff
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section libtiff is earlier than 0:3.8.2-14.el5_8 AND libtiff-devel is earlier than 0:3.8.2-14.el5_8 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section libtiff is earlier than 0:3.9.4-5.el6_2 AND libtiff-devel is earlier than 0:3.9.4-5.el6_2 AND libtiff-static is earlier than 0:3.9.4-5.el6_2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Libtiff cpe:2.3:a:libtiff:libtiff:3.9.4:::::::* cpe:2.3:a:libtiff:libtiff:3.9.3:::::::* cpe:2.3:a:libtiff:libtiff:3.9.2-5.2.1:::::::* cpe:2.3:a:libtiff:libtiff:3.9.2:::::::* cpe:2.3:a:libtiff:libtiff:3.9.1:::::::* cpe:2.3:a:libtiff:libtiff:3.9.0:::::::* cpe:2.3:a:libtiff:libtiff:3.9.0:beta:::::: cpe:2.3:a:libtiff:libtiff:3.9:::::::* cpe:2.3:a:libtiff:libtiff:3.8.2:::::::* cpe:2.3:a:libtiff:libtiff:3.8.1:::::::* cpe:2.3:a:libtiff:libtiff:3.8.0:::::::* cpe:2.3:a:libtiff:libtiff:3.7.4:::::::* cpe:2.3:a:libtiff:libtiff:3.7.3:::::::* cpe:2.3:a:libtiff:libtiff:3.7.2:::::::* cpe:2.3:a:libtiff:libtiff:3.7.1:::::::* cpe:2.3:a:libtiff:libtiff:3.7.0:::::::* cpe:2.3:a:libtiff:libtiff:3.7.0:beta:::::: cpe:2.3:a:libtiff:libtiff:3.7.0:beta2:::::: cpe:2.3:a:libtiff:libtiff:3.7.0:alpha:::::: cpe:2.3:a:libtiff:libtiff:3.6.1:::::::* cpe:2.3:a:libtiff:libtiff:3.6.0:beta2:::::: cpe:2.3:a:libtiff:libtiff:3.6.0:::::::* cpe:2.3:a:libtiff:libtiff:3.6.0:beta:::::: cpe:2.3:a:libtiff:libtiff:3.5.7:alpha2:::::: cpe:2.3:a:libtiff:libtiff:3.5.7:alpha4:::::: cpe:2.3:a:libtiff:libtiff:3.5.7:beta:::::: cpe:2.3:a:libtiff:libtiff:3.5.7:alpha3:::::: cpe:2.3:a:libtiff:libtiff:3.5.7:alpha:::::: cpe:2.3:a:libtiff:libtiff:3.5.7:::::::* cpe:2.3:a:libtiff:libtiff:3.5.6:::::::* cpe:2.3:a:libtiff:libtiff:3.5.6:beta:::::: cpe:2.3:a:libtiff:libtiff:3.5.5:::::::* cpe:2.3:a:libtiff:libtiff:3.5.4:::::::* cpe:2.3:a:libtiff:libtiff:3.5.3:::::::* cpe:2.3:a:libtiff:libtiff:3.5.2:::::::* cpe:2.3:a:libtiff:libtiff:3.5.1:::::::* cpe:2.3:a:libtiff:libtiff:3.4:beta35:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta28:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta18:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta32:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta29:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta37:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta31:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta24:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta34:::::: cpe:2.3:a:libtiff:libtiff:3.4:beta36:::::: cpe:2.3:a:libtiff:libtiff:3.4:::::::* cpe:2.3:a:libtiff:libtiff:::::::: cpe:2.3:a:libtiff:libtiff:-:::::::*	49

OpenVAS Exploits

Date	Description
2012-12-31	Name : Fedora Update for libtiff FEDORA-2012-20404 File : nvt/gb_fedora_2012_20404_libtiff_fc16.nasl
2012-10-03	Name : Debian Security Advisory DSA 2552-1 (tiff) File : nvt/deb_2552_1.nasl
2012-09-26	Name : Gentoo Security Advisory GLSA 201209-02 (tiff) File : nvt/glsa_201209_02.nasl
2012-09-25	Name : Mac OS X v10.6.8 Multiple Vulnerabilities (2012-004) File : nvt/gb_macosx_su12-004.nasl
2012-09-10	Name : Slackware Advisory SSA:2012-098-01 libtiff File : nvt/esoft_slk_ssa_2012_098_01.nasl
2012-08-30	Name : Fedora Update for libtiff FEDORA-2012-5463 File : nvt/gb_fedora_2012_5463_libtiff_fc17.nasl
2012-08-14	Name : Fedora Update for libtiff FEDORA-2012-10978 File : nvt/gb_fedora_2012_10978_libtiff_fc16.nasl
2012-08-03	Name : Mandriva Update for libtiff MDVSA-2012:054 (libtiff) File : nvt/gb_mandriva_MDVSA_2012_054.nasl
2012-07-30	Name : CentOS Update for libtiff CESA-2012:0468 centos5 File : nvt/gb_CESA-2012_0468_libtiff_centos5.nasl
2012-07-30	Name : CentOS Update for libtiff CESA-2012:0468 centos6 File : nvt/gb_CESA-2012_0468_libtiff_centos6.nasl
2012-07-16	Name : Fedora Update for libtiff FEDORA-2012-10089 File : nvt/gb_fedora_2012_10089_libtiff_fc16.nasl
2012-04-30	Name : Debian Security Advisory DSA 2447-1 (tiff) File : nvt/deb_2447_1.nasl
2012-04-23	Name : Fedora Update for libtiff FEDORA-2012-5410 File : nvt/gb_fedora_2012_5410_libtiff_fc16.nasl
2012-04-20	Name : Fedora Update for libtiff FEDORA-2012-5406 File : nvt/gb_fedora_2012_5406_libtiff_fc15.nasl
2012-04-11	Name : RedHat Update for libtiff RHSA-2012:0468-01 File : nvt/gb_RHSA-2012_0468-01_libtiff.nasl
2012-04-05	Name : Ubuntu Update for tiff USN-1416-1 File : nvt/gb_ubuntu_USN_1416_1.nasl
2011-04-22	Name : Fedora Update for libtiff FEDORA-2011-5304 File : nvt/gb_fedora_2011_5304_libtiff_fc14.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
72233	LibTIFF tiffdump tiffdump.c ReadDirectory Function Overflow DoS LibTIFF is prone to an overflow condition. The ReadDirectory function in tiffdump.c in the tiffdump utility fails to properly sanitize user-supplied input resulting in an integer overflow. With a specially crafted TIFF file, a context-dependent attacker can potentially cause a denial of service.

Nessus® Vulnerability Scanner

Date	Description
2015-01-19	Name : The remote Solaris system is missing a security patch for third-party software. File : solaris11_libtiff_20120710.nasl - Type : ACT_GATHER_INFO
2015-01-12	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL15863.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_libtiff-devel-110415.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_libtiff-devel-110415.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2012-234.nasl - Type : ACT_GATHER_INFO
2013-09-04	Name : The remote Amazon Linux AMI host is missing a security update. File : ala_ALAS-2012-65.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2012-0468.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0519.nasl - Type : ACT_GATHER_INFO
2012-09-27	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2552.nasl - Type : ACT_GATHER_INFO
2012-09-27	Name : The remote device is affected by multiple vulnerabilities. File : appletv_5_1.nasl - Type : ACT_GATHER_INFO
2012-09-24	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201209-02.nasl - Type : ACT_GATHER_INFO
2012-09-20	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_10_7_5.nasl - Type : ACT_GATHER_INFO
2012-09-20	Name : The remote host is missing a Mac OS X update that fixes multiple security vul... File : macosx_SecUpd2012-004.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20120410_libtiff_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-06-14	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2012-098-01.nasl - Type : ACT_GATHER_INFO
2012-04-23	Name : The remote Fedora host is missing a security update. File : fedora_2012-5410.nasl - Type : ACT_GATHER_INFO
2012-04-19	Name : The remote Fedora host is missing a security update. File : fedora_2012-5406.nasl - Type : ACT_GATHER_INFO
2012-04-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libtiff-8055.nasl - Type : ACT_GATHER_INFO
2012-04-18	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libtiff-devel-120405.nasl - Type : ACT_GATHER_INFO
2012-04-12	Name : The remote Fedora host is missing a security update. File : fedora_2012-5463.nasl - Type : ACT_GATHER_INFO
2012-04-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2012-0468.nasl - Type : ACT_GATHER_INFO
2012-04-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2012-0468.nasl - Type : ACT_GATHER_INFO
2012-04-06	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2447.nasl - Type : ACT_GATHER_INFO
2012-04-05	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2012-054.nasl - Type : ACT_GATHER_INFO
2012-04-05	Name : The remote Ubuntu host is missing a security-related patch. File : ubuntu_USN-1416-1.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libtiff-7474.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libtiff-devel-110415.nasl - Type : ACT_GATHER_INFO
2011-04-29	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12702.nasl - Type : ACT_GATHER_INFO
2011-04-29	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libtiff-devel-110415.nasl - Type : ACT_GATHER_INFO
2011-04-29	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_libtiff-7473.nasl - Type : ACT_GATHER_INFO
2011-04-27	Name : The remote Fedora host is missing a security update. File : fedora_2011-5336.nasl - Type : ACT_GATHER_INFO
2011-04-20	Name : The remote Fedora host is missing a security update. File : fedora_2011-5304.nasl - Type : ACT_GATHER_INFO
2010-07-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0519.nasl - Type : ACT_GATHER_INFO
2010-07-16	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0519.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:59:57	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	9
CPE ID(s)	49
osvdb(s)	1
Openvas Exploit(s)	17
Nessus® Exploit(s)	34

	Related
6.8	CVE-2012-1173
4.3	CVE-2010-4665
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)