Executive Summary
This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
| Summary | |
|---|---|
| Title | Dovecot vulnerabilities |
| Informations | |||
|---|---|---|---|
| Name | USN-838-1 | First vendor Publication | 2009-09-28 |
| Vendor | Ubuntu | Last vendor Modification | 2009-09-28 |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: Ubuntu 8.10: Ubuntu 9.04: In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: It was discovered that the ACL plugin in Dovecot would incorrectly handle negative access rights. An attacker could exploit this flaw to access the Dovecot server, bypassing the indended access restrictions. This only affected Ubuntu 8.04 LTS. (CVE-2008-4577) It was discovered that the ManageSieve service in Dovecot incorrectly handled ".." in script names. A remote attacker could exploit this to read and modify arbitrary sieve files on the server. This only affected Ubuntu 8.10. (CVE-2008-5301) It was discovered that the Sieve plugin in Dovecot incorrectly handled certain sieve scripts. An authenticated user could exploit this with a crafted sieve script to cause a denial of service or possibly execute arbitrary code. (CVE-2009-2632, CVE-2009-3235) |
Original Source
| Url : http://www.ubuntu.com/usn/USN-838-1 |
CAPEC : Common Attack Pattern Enumeration & Classification
| Id | Name |
|---|---|
| CAPEC-1 | Accessing Functionality Not Properly Constrained by ACLs |
| CAPEC-13 | Subverting Environment Variable Values |
| CAPEC-17 | Accessing, Modifying or Executing Executable Files |
| CAPEC-39 | Manipulating Opaque Client-based Data Tokens |
| CAPEC-45 | Buffer Overflow via Symbolic Links |
| CAPEC-51 | Poison Web Service Registry |
| CAPEC-59 | Session Credential Falsification through Prediction |
| CAPEC-60 | Reusing Session IDs (aka Session Replay) |
| CAPEC-76 | Manipulating Input to File System Calls |
| CAPEC-77 | Manipulating User-Controlled Variables |
| CAPEC-87 | Forceful Browsing |
| CAPEC-104 | Cross Zone Scripting |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 67 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 33 % | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:10082 | |||
| Oval ID: | oval:org.mitre.oval:def:10082 | ||
| Title: | Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error. | ||
| Description: | Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2009-2632 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:10376 | |||
| Oval ID: | oval:org.mitre.oval:def:10376 | ||
| Title: | The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions. | ||
| Description: | The ACL plugin in Dovecot before 1.1.4 treats negative access rights as if they are positive access rights, which allows attackers to bypass intended access restrictions. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2008-4577 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:10515 | |||
| Oval ID: | oval:org.mitre.oval:def:10515 | ||
| Title: | Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632. | ||
| Description: | Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2009-3235 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5 | Product(s): | |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:13646 | |||
| Oval ID: | oval:org.mitre.oval:def:13646 | ||
| Title: | USN-838-1 -- dovecot vulnerabilities | ||
| Description: | It was discovered that the ACL plugin in Dovecot would incorrectly handle negative access rights. An attacker could exploit this flaw to access the Dovecot server, bypassing the indended access restrictions. This only affected Ubuntu 8.04 LTS. It was discovered that the ManageSieve service in Dovecot incorrectly handled ".." in script names. A remote attacker could exploit this to read and modify arbitrary sieve files on the server. This only affected Ubuntu 8.10. It was discovered that the Sieve plugin in Dovecot incorrectly handled certain sieve scripts. An authenticated user could exploit this with a crafted sieve script to cause a denial of service or possibly execute arbitrary code | ||
| Family: | unix | Class: | patch |
| Reference(s): | USN-838-1 CVE-2008-4577 CVE-2008-5301 CVE-2009-2632 CVE-2009-3235 | Version: | 5 |
| Platform(s): | Ubuntu 8.10 Ubuntu 8.04 Ubuntu 9.04 | Product(s): | dovecot |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:18608 | |||
| Oval ID: | oval:org.mitre.oval:def:18608 | ||
| Title: | DSA-1892-1 dovecot - arbitrary code execution | ||
| Description: | It was discovered that the SIEVE component of dovecot, a mail server that supports mbox and maildir mailboxes, is vulnerable to a buffer overflow when processing SIEVE scripts. This can be used to elevate privileges to the dovecot system user. An attacker who is able to install SIEVE scripts executed by the server is therefore able to read and modify arbitrary email messages on the system. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1892-1 CVE-2009-2632 CVE-2009-3235 | Version: | 7 |
| Platform(s): | Debian GNU/Linux 4.0 Debian GNU/Linux 5.0 | Product(s): | dovecot |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:20174 | |||
| Oval ID: | oval:org.mitre.oval:def:20174 | ||
| Title: | DSA-1893-1 cyrus-imapd-2.2 kolab-cyrus-imapd - arbitrary code execution | ||
| Description: | It was discovered that the SIEVE component of cyrus-imapd and kolab-cyrus-imapd, the Cyrus mail system, is vulnerable to a buffer overflow when processing SIEVE scripts. This can be used to elevate privileges to the cyrus system user. An attacker who is able to install SIEVE scripts executed by the server is therefore able to read and modify arbitrary email messages on the system. The update introduced by <a href="../../security/2009/dsa-1881">DSA 1881-1</a> was incomplete and the issue has been given an additional CVE id due to its complexity. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1893-1 CVE-2009-2632 CVE-2009-3235 | Version: | 5 |
| Platform(s): | Debian GNU/Linux 4.0 Debian GNU/Linux 5.0 | Product(s): | cyrus-imapd-2.2 kolab-cyrus-imapd |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:22982 | |||
| Oval ID: | oval:org.mitre.oval:def:22982 | ||
| Title: | ELSA-2009:1459: cyrus-imapd security update (Important) | ||
| Description: | Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632. | ||
| Family: | unix | Class: | patch |
| Reference(s): | ELSA-2009:1459-04 CVE-2009-2632 CVE-2009-3235 | Version: | 13 |
| Platform(s): | Oracle Linux 5 | Product(s): | cyrus-imapd |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:28758 | |||
| Oval ID: | oval:org.mitre.oval:def:28758 | ||
| Title: | RHSA-2009:1459 -- cyrus-imapd security update (Important) | ||
| Description: | Updated cyrus-imapd packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support. | ||
| Family: | unix | Class: | patch |
| Reference(s): | RHSA-2009:1459 CESA-2009:1459-CentOS 5 CVE-2009-2632 CVE-2009-3235 | Version: | 3 |
| Platform(s): | Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 4 CentOS Linux 5 | Product(s): | cyrus-imapd |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:8390 | |||
| Oval ID: | oval:org.mitre.oval:def:8390 | ||
| Title: | DSA-1892 dovecot -- buffer overflow | ||
| Description: | It was discovered that the SIEVE component of dovecot, a mail server that supports mbox and maildir mailboxes, is vulnerable to a buffer overflow when processing SIEVE scripts. This can be used to elevate privileges to the dovecot system user. An attacker who is able to install SIEVE scripts executed by the server is therefore able to read and modify arbitrary email messages on the system. | ||
| Family: | unix | Class: | patch |
| Reference(s): | DSA-1892 CVE-2009-2632 CVE-2009-3235 | Version: | 3 |
| Platform(s): | Debian GNU/Linux 5.0 Debian GNU/Linux 4.0 | Product(s): | dovecot |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2012-02-12 | Name : Gentoo Security Advisory GLSA 201110-16 (Cyrus IMAP Server) File : nvt/glsa_201110_16.nasl |
| 2012-02-12 | Name : Gentoo Security Advisory GLSA 201110-04 (Dovecot) File : nvt/glsa_201110_04.nasl |
| 2011-08-09 | Name : CentOS Update for cyrus-imapd CESA-2009:1459 centos4 i386 File : nvt/gb_CESA-2009_1459_cyrus-imapd_centos4_i386.nasl |
| 2011-08-09 | Name : CentOS Update for cyrus-imapd CESA-2009:1459 centos5 i386 File : nvt/gb_CESA-2009_1459_cyrus-imapd_centos5_i386.nasl |
| 2010-10-19 | Name : Mandriva Update for dovecot MDVSA-2010:196 (dovecot) File : nvt/gb_mandriva_MDVSA_2010_196.nasl |
| 2010-08-02 | Name : Cyrus IMAP Server SIEVE Script Handling Buffer Overflow Vulnerability File : nvt/secpod_cyrus_imap_server_bof_vuln.nasl |
| 2010-05-12 | Name : Mac OS X 10.6.3 Update / Mac OS X Security Update 2010-002 File : nvt/macosx_upd_10_6_3_secupd_2010-002.nasl |
| 2010-05-12 | Name : Mac OS X 10.6.2 Update / Mac OS X Security Update 2009-006 File : nvt/macosx_upd_10_6_2_secupd_2009-006.nasl |
| 2009-12-10 | Name : Mandriva Security Advisory MDVSA-2009:229-1 (cyrus-imapd) File : nvt/mdksa_2009_229_1.nasl |
| 2009-11-11 | Name : SuSE Security Summary SUSE-SR:2009:018 File : nvt/suse_sr_2009_018.nasl |
| 2009-11-11 | Name : SLES9: Security update for Cyrus IMAPD File : nvt/sles9p5061160.nasl |
| 2009-11-11 | Name : SLES11: Security update for Cyrus IMAPD File : nvt/sles11_cyrus-imapd0.nasl |
| 2009-11-11 | Name : SLES10: Security update for Cyrus IMAPD File : nvt/sles10_cyrus-imapd0.nasl |
| 2009-10-19 | Name : SuSE Security Summary SUSE-SR:2009:016 File : nvt/suse_sr_2009_016.nasl |
| 2009-10-06 | Name : Ubuntu USN-838-1 (dovecot) File : nvt/ubuntu_838_1.nasl |
| 2009-09-28 | Name : Debian Security Advisory DSA 1893-1 (cyrus-imapd-2.2 kolab-cyrus-imapd) File : nvt/deb_1893_1.nasl |
| 2009-09-28 | Name : RedHat Security Advisory RHSA-2009:1459 File : nvt/RHSA_2009_1459.nasl |
| 2009-09-28 | Name : Debian Security Advisory DSA 1892-1 (dovecot) File : nvt/deb_1892_1.nasl |
| 2009-09-28 | Name : CentOS Security Advisory CESA-2009:1459 (cyrus-imapd) File : nvt/ovcesa2009_1459.nasl |
| 2009-09-28 | Name : Fedora Core 11 FEDORA-2009-9901 (cyrus-imapd) File : nvt/fcore_2009_9901.nasl |
| 2009-09-28 | Name : Mandrake Security Advisory MDVSA-2009:242-1 (dovecot) File : nvt/mdksa_2009_242_1.nasl |
| 2009-09-28 | Name : Fedora Core 10 FEDORA-2009-9869 (cyrus-imapd) File : nvt/fcore_2009_9869.nasl |
| 2009-09-28 | Name : Mandrake Security Advisory MDVSA-2009:242 (dovecot) File : nvt/mdksa_2009_242.nasl |
| 2009-09-23 | Name : Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities File : nvt/secpod_dovecot_sieve_mult_bof_vuln.nasl |
| 2009-09-15 | Name : Mandrake Security Advisory MDVSA-2009:229 (cyrus-imapd) File : nvt/mdksa_2009_229.nasl |
| 2009-09-15 | Name : Fedora Core 11 FEDORA-2009-9417 (cyrus-imapd) File : nvt/fcore_2009_9417.nasl |
| 2009-09-15 | Name : Fedora Core 10 FEDORA-2009-9559 (dovecot) File : nvt/fcore_2009_9559.nasl |
| 2009-09-15 | Name : FreeBSD Ports: cyrus-imapd File : nvt/freebsd_cyrus-imapd4.nasl |
| 2009-09-15 | Name : Debian Security Advisory DSA 1881-1 (cyrus-imapd-2.2) File : nvt/deb_1881_1.nasl |
| 2009-06-05 | Name : Ubuntu USN-698-1 (nagios) File : nvt/ubuntu_698_1.nasl |
| 2009-04-09 | Name : Mandriva Update for dovecot MDVSA-2008:232 (dovecot) File : nvt/gb_mandriva_MDVSA_2008_232.nasl |
| 2009-02-18 | Name : SuSE Security Summary SUSE-SR:2009:004 File : nvt/suse_sr_2009_004.nasl |
| 2009-02-17 | Name : Fedora Update for dovecot FEDORA-2008-9232 File : nvt/gb_fedora_2008_9232_dovecot_fc8.nasl |
| 2009-02-17 | Name : Fedora Update for dovecot FEDORA-2008-9202 File : nvt/gb_fedora_2008_9202_dovecot_fc9.nasl |
| 2009-01-26 | Name : RedHat Security Advisory RHSA-2009:0205 File : nvt/RHSA_2009_0205.nasl |
| 2008-12-29 | Name : Ubuntu USN-697-1 (imlib2) File : nvt/ubuntu_697_1.nasl |
| 2008-12-29 | Name : Ubuntu USN-698-2 (nagios3) File : nvt/ubuntu_698_2.nasl |
| 2008-12-29 | Name : Ubuntu USN-699-1 (blender) File : nvt/ubuntu_699_1.nasl |
| 2008-12-23 | Name : Gentoo Security Advisory GLSA 200812-16 (dovecot) File : nvt/glsa_200812_16.nasl |
| 2008-12-10 | Name : FreeBSD Ports: dovecot-managesieve File : nvt/freebsd_dovecot-managesieve.nasl |
| 2008-11-24 | Name : FreeBSD Ports: dovecot File : nvt/freebsd_dovecot1.nasl |
| 2008-10-17 | Name : Dovecot ACL Plugin Security Bypass Vulnerabilities File : nvt/gb_dovecot_mult_sec_bypass_vuln.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 58103 | Dovecot CMU Sieve Plugin Script Handling Multiple Overflows Multiple remote overflow exist in Dovecot CMU Sieve Plugin. Dovecot CMU Sieve Plugin fails to conduct unspecified actions resulting in a buffer overflows. With a specially crafted request, an attacker can cause execution of arbitrary code resulting in a loss of integrity. |
| 57843 | Cyrus IMAP Server (cyrus-imapd) SIEVE Script Component (sieve/script.c) Craft... |
| 49918 | Dovecot ManageSieve Script Name Handling Traversal Arbitrary File Manipulation |
| 49098 | Dovecot ACL Plugin Negative Access Rights Bypass |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2013-07-12 | Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1459.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20090923_cyrus_imapd_on_SL4_x.nasl - Type : ACT_GATHER_INFO |
| 2012-08-01 | Name : The remote Scientific Linux host is missing a security update. File : sl_20090120_dovecot_on_SL5_x.nasl - Type : ACT_GATHER_INFO |
| 2011-10-24 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-16.nasl - Type : ACT_GATHER_INFO |
| 2011-10-11 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-04.nasl - Type : ACT_GATHER_INFO |
| 2010-10-11 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cyrus-imapd-6521.nasl - Type : ACT_GATHER_INFO |
| 2010-10-06 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-196.nasl - Type : ACT_GATHER_INFO |
| 2010-03-29 | Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2010-002.nasl - Type : ACT_GATHER_INFO |
| 2010-02-24 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1881.nasl - Type : ACT_GATHER_INFO |
| 2010-02-24 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1892.nasl - Type : ACT_GATHER_INFO |
| 2010-02-24 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1893.nasl - Type : ACT_GATHER_INFO |
| 2010-01-06 | Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1459.nasl - Type : ACT_GATHER_INFO |
| 2009-11-09 | Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_2.nasl - Type : ACT_GATHER_INFO |
| 2009-10-30 | Name : The remote openSUSE host is missing a security update. File : suse_cyrus-imapd-6511.nasl - Type : ACT_GATHER_INFO |
| 2009-10-30 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_cyrus-imapd-090924.nasl - Type : ACT_GATHER_INFO |
| 2009-10-30 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_cyrus-imapd-090924.nasl - Type : ACT_GATHER_INFO |
| 2009-10-29 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_cyrus-imapd-6509.nasl - Type : ACT_GATHER_INFO |
| 2009-10-29 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_cyrus-imapd-090924.nasl - Type : ACT_GATHER_INFO |
| 2009-10-29 | Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12520.nasl - Type : ACT_GATHER_INFO |
| 2009-10-13 | Name : The remote openSUSE host is missing a security update. File : suse_dovecot-6539.nasl - Type : ACT_GATHER_INFO |
| 2009-10-13 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_dovecot-091008.nasl - Type : ACT_GATHER_INFO |
| 2009-10-13 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_dovecot-091007.nasl - Type : ACT_GATHER_INFO |
| 2009-10-06 | Name : The remote openSUSE host is missing a security update. File : suse_cyrus-imapd-6483.nasl - Type : ACT_GATHER_INFO |
| 2009-09-29 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-838-1.nasl - Type : ACT_GATHER_INFO |
| 2009-09-25 | Name : The remote Fedora host is missing a security update. File : fedora_2009-9901.nasl - Type : ACT_GATHER_INFO |
| 2009-09-25 | Name : The remote Fedora host is missing a security update. File : fedora_2009-9869.nasl - Type : ACT_GATHER_INFO |
| 2009-09-24 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1459.nasl - Type : ACT_GATHER_INFO |
| 2009-09-23 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-242.nasl - Type : ACT_GATHER_INFO |
| 2009-09-22 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_cyrus-imapd-090908.nasl - Type : ACT_GATHER_INFO |
| 2009-09-22 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_cyrus-imapd-090908.nasl - Type : ACT_GATHER_INFO |
| 2009-09-16 | Name : The remote Fedora host is missing a security update. File : fedora_2009-9559.nasl - Type : ACT_GATHER_INFO |
| 2009-09-14 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-229.nasl - Type : ACT_GATHER_INFO |
| 2009-09-10 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_012b495c9d5111de8d20001bd3385381.nasl - Type : ACT_GATHER_INFO |
| 2009-07-21 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_dovecot-090205.nasl - Type : ACT_GATHER_INFO |
| 2009-04-23 | Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-232.nasl - Type : ACT_GATHER_INFO |
| 2009-02-13 | Name : The remote openSUSE host is missing a security update. File : suse_dovecot-5986.nasl - Type : ACT_GATHER_INFO |
| 2009-01-21 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2009-0205.nasl - Type : ACT_GATHER_INFO |
| 2008-12-15 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200812-16.nasl - Type : ACT_GATHER_INFO |
| 2008-12-08 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_3efc106ec45111dda7210030843d3802.nasl - Type : ACT_GATHER_INFO |
| 2008-11-21 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_75c24c1db68811dd88fd001c2514716c.nasl - Type : ACT_GATHER_INFO |
| 2008-10-31 | Name : The remote Fedora host is missing a security update. File : fedora_2008-9232.nasl - Type : ACT_GATHER_INFO |
| 2008-10-31 | Name : The remote Fedora host is missing a security update. File : fedora_2008-9202.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 12:06:17 |
|
