9.3 - VMSA-2012-0013

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	VMware vSphere and vCOps updates to third party libraries

Informations
Name	VMSA-2012-0013	First vendor Publication	2012-08-30
Vendor	VMware	Last vendor Modification	2012-12-20
Severity (Vendor)	N/A	Revision	2

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

a. vCenter and ESX update to JRE 1.6.0 Update 31

The Oracle (Sun) JRE is updated to version 1.6.0_31, which addresses multiple security issues. Oracle has documented the CVE identifiers that are addressed by this update in the Oracle Java SE Critical Patch Update Advisory of February 2012.

b. vCenter Update Manager update to JRE 1.5.0 Update 36

The Oracle (Sun) JRE is updated to 1.5.0_36 to address multiple security issues. Oracle has documented the CVE identifiers that are addressed in JRE 1.5.0_36 in the Oracle Java SE Critical Patch Update Advisory for June 2012.

c. Update to ESX/ESXi userworld OpenSSL library

The ESX/ESXi userworld OpenSSL library is updated from version 0.9.8p to version 0.9.8t to resolve multiple security issues.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2010-4180, CVE-2010-4252, CVE-2011-0014, CVE-2011-4108, CVE-2011-4109, CVE-2011-4576, CVE-2011-4577, CVE-2011-4619, and CVE-2012-0050 to these issues.

d. Update to ESX service console OpenSSL RPM

The service console OpenSSL RPM is updated to version 0.9.8e-22.el5_8.3 to resolve a security issue.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-2110 to this issue.

e. Update to ESX service console kernel

The ESX service console kernel is updated to resolve multiple security issues.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2011-1833, CVE-2011-2484, CVE-2011-2496, CVE-2011-3188, CVE-2011-3209, CVE-2011-3363, CVE-2011-4110, CVE-2011-1020, CVE-2011-4132, CVE-2011-4324, CVE-2011-4325, CVE-2012-0207, CVE-2011-2699, and CVE-2012-1583 to these issues.

f. Update to ESX service console Perl RPM

The ESX service console Perl RPM is updated to perl-5.8.8.32.1.8999.vmw to resolve multiple security issues.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2010-2761, CVE-2010-4410, and CVE-2011-3597 to these issues.

g. Update to ESX service console libxml2 RPMs

The ESX service console libmxl2 RPMs are updated to libxml2-2.6.26-2.1.15.el5_8.2 and libxml2-python-2.6.26-2.1.15.el5_8.2 to resolve a security issue.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-0841 to this issue.

h. Update to ESX service console glibc RPM

The ESX service console glibc RPM is updated to version glibc-2.5-81.el5_8.1 to resolve multiple security issues.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2009-5029, CVE-2009-5064, CVE-2010-0830, CVE-2011-1089, CVE-2011-4609, and CVE-2012-0864 to these issue.

i. Update to ESX service console GnuTLS RPM

The ESX service console GnuTLS RPM is updated to version 1.4.1-7.el5_8.2 to resolve multiple security issues.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2011-4128, CVE-2012-1569, and CVE-2012-1573 to these issues.

j. Update to ESX service console popt, rpm, rpm-libs, and rpm-python RPMS

The ESX service console popt, rpm, rpm-libs, and rpm-python RPMS are updated to the following versions to resolve multiple security issues: - popt-1.10.2.3-28.el5_8 - rpm-4.4.2.3-28.el5_8 - rpm-libs-4.4.2.3-28.el5_8 - rpm-python-4.4.2.3-28.el5_8

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-0060, CVE-2012-0061, and CVE-2012-0815 to these issues.

k. Vulnerability in third party Apache Struts component

The version of Apache Struts in vCenter Operations has been updated to 2.3.4 which addresses an arbitrary file overwrite vulnerability. This vulnerability allows an attacker to create a denial of service by overwriting arbitrary files without authentication. The attacker would need to be on the same network as the system where vCOps is installed.

The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2012-0393 to this issue.

Note: Apache struts 2.3.4 addresses the following issues as well: CVE-2011-5057, CVE-2012-0391, CVE-2012-0392, CVE-2012-0394. It was found that these do not affect vCOps.

VMware would like to thank Alexander Minozhenko from ERPScan for reporting this issue to us.

Original Source

Url : http://www.vmware.com/security/advisories/VMSA-2012-0013.html

CWE : Common Weakness Enumeration

%	Id	Name
22 %	CWE-399	Resource Management Errors
18 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
15 %	CWE-20	Improper Input Validation
12 %	CWE-264	Permissions, Privileges, and Access Controls
8 %	CWE-310	Cryptographic Issues
8 %	CWE-94	Failure to Control Generation of Code ('Code Injection')
5 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
2 %	CWE-369	Divide By Zero
2 %	CWE-362	Race Condition
2 %	CWE-287	Improper Authentication
2 %	CWE-200	Information Exposure
2 %	CWE-16	Configuration

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:12481

Oval ID:	oval:org.mitre.oval:def:12481
Title:	DSA-2141-4 lighttpd -- compatibility problem with updated openssl
Description:	The openssl update in DSA-2141-1 caused a regression in lighttpd. Due to a bug in lighttpd, the server fails to start in some configurations if using the updated openssl libraries. This update fixes this problem.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-4 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	lighttpd
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND lighttpd DPKG is earlier than 1.4.19-5+lenny2

Definition Id: oval:org.mitre.oval:def:12573

Oval ID:	oval:org.mitre.oval:def:12573
Title:	DSA-2141-3 apache2 -- backward compatibility option for SSL/TLS insecure
Description:	DSA-2141-1 changed the behaviour of the openssl libraries in a server environment to only allow SSL/TLS renegotiation for clients that support the RFC5746 renegotiation extension. This update to apache2 adds the new SSLInsecureRenegotiation configuration option that allows to restore support for insecure clients. More information can be found in the file /usr/share/doc/apache2.2-common/NEWS.Debian.gz .
Family:	unix	Class:	patch
Reference(s):	DSA-2141-3 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	apache2
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND apache2 DPKG is earlier than 2.2.9-10+lenny9

Definition Id: oval:org.mitre.oval:def:12707

Oval ID:	oval:org.mitre.oval:def:12707
Title:	DSA-2141-1 openssl -- SSL/TLS insecure renegotiation protocol design flaw
Description:	CVE-2009-3555: Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds backported support for the new RFC5746 renegotiation extension which fixes this issue. If openssl is used in a server application, it will by default no longer accept renegotiation from clients that do not support the RFC5746 secure renegotiation extension. A separate advisory will add RFC5746 support for nss, the security library used by the iceweasel web browser. For apache2, there will be an update which allows to re-enable insecure renegotiation. This version of openssl is not compatible with older versions of tor. You have to use at least tor version 0.2.1.26-1~lenny+1, which has been included in the point release 5.0.7 of Debian stable. Currently we are not aware of other software with similar compatibility problems. CVE-2010-4180: In addition, this update fixes a flaw that allowed a client to bypass restrictions configured in the server for the used cipher suite.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-1 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	openssl
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8g-15+lenny11

Definition Id: oval:org.mitre.oval:def:12801

Oval ID:	oval:org.mitre.oval:def:12801
Title:	DSA-2141-2 nss -- SSL/TLS insecure renegotiation protocol design flaw
Description:	CVE-2009-3555: Marsh Ray, Steve Dispensa, and Martin Rex discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user's session. This update adds backported support for the new RFC5746 renegotiation extension which fixes this issue. The updated libraries allow to use shell environment variables to configure if insecure renegotiation is still allowed. The syntax of these environment variables is described in the release notes to version 3.12.6 of nss: https://developer.mozilla.org/NSS_3.12.6_release_notes However, the default behaviour for nss in Debian 5.0 is NSS_SSL_ENABLE_RENEGOTIATION=3, which allows clients to continue to renegotiate with vulnerable servers.
Family:	unix	Class:	patch
Reference(s):	DSA-2141-2 CVE-2009-3555 CVE-2010-4180	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	nss
Definition Synopsis:
Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND nss DPKG is earlier than 3.12.3.1-0lenny3

Definition Id: oval:org.mitre.oval:def:12932

Oval ID:	oval:org.mitre.oval:def:12932
Title:	DSA-2162-1 openssl -- invalid memory access
Description:	Neel Mehta discovered that an incorrectly formatted ClientHello handshake message could cause OpenSSL to parse past the end of the message. This allows an attacker to crash an application using OpenSSL by triggering an invalid memory access. Additionally, some applications may be vulnerable to expose contents of a parsed OCSP nonce extension. Packages in the oldstable distribution are not affected by this problem.
Family:	unix	Class:	patch
Reference(s):	DSA-2162-1 CVE-2011-0014	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8o-4squeeze1

Definition Id: oval:org.mitre.oval:def:12941

Oval ID:	oval:org.mitre.oval:def:12941
Title:	USN-944-1 -- glibc, eglibc vulnerabilities
Description:	Maksymilian Arciemowicz discovered that the GNU C library did not correctly handle integer overflows in the strfmon function. If a user or automated system were tricked into processing a specially crafted format string, a remote attacker could crash applications, leading to a denial of service. Jeff Layton and Dan Rosenberg discovered that the GNU C library did not correctly handle newlines in the mntent family of functions. If a local attacker were able to inject newlines into a mount entry through other vulnerable mount helpers, they could disrupt the system or possibly gain root privileges. Dan Rosenberg discovered that the GNU C library did not correctly validate certain ELF program headers. If a user or automated system were tricked into verifying a specially crafted ELF program, a remote attacker could execute arbitrary code with user privileges
Family:	unix	Class:	patch
Reference(s):	USN-944-1 CVE-2008-1391 CVE-2010-0296 CVE-2010-0830	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	glibc eglibc
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.7-10ubuntu6 AND glibc-source DPKG is earlier than 2.7-10ubuntu6 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section libnss-files-udeb DPKG is earlier than 2.7-10ubuntu6 AND libc6-prof DPKG is earlier than 2.7-10ubuntu6 AND libc6 DPKG is earlier than 2.7-10ubuntu6 AND libc6-dev DPKG is earlier than 2.7-10ubuntu6 AND libc6-pic DPKG is earlier than 2.7-10ubuntu6 AND libnss-dns-udeb DPKG is earlier than 2.7-10ubuntu6 AND nscd DPKG is earlier than 2.7-10ubuntu6 AND libc6-dbg DPKG is earlier than 2.7-10ubuntu6 AND libc6-udeb DPKG is earlier than 2.7-10ubuntu6 OR Architecture depended section Installed architecture is i386 AND Packages section libc6-amd64 DPKG is earlier than 2.7-10ubuntu6 AND libc6-dev-amd64 DPKG is earlier than 2.7-10ubuntu6 AND libc6-i686 DPKG is earlier than 2.7-10ubuntu6 AND libc6-xen DPKG is earlier than 2.7-10ubuntu6 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.7-10ubuntu6 AND libc6-ppc64 DPKG is earlier than 2.7-10ubuntu6 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.11.1-0ubuntu7.1 AND eglibc-source DPKG is earlier than 2.11.1-0ubuntu7.1 OR Architecture depended section Installed architecture is sparc AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.1 AND libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dev-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-sparc64v DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-sparcv9b DPKG is earlier than 2.11.1-0ubuntu7.1 AND nscd DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-sparcv9v2 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-sparc64b DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-sparc64v2 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-sparc64 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-sparcv9v DPKG is earlier than 2.11.1-0ubuntu7.1 AND libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 OR Architecture depended section Installed architecture is i386 AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.1 AND libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 AND nscd DPKG is earlier than 2.11.1-0ubuntu7.1 AND libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-amd64 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dev-amd64 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-i686 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-xen DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 OR Supported platform section Installed architecture is powerpc AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.1 AND libnss-files-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libnss-dns-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 AND nscd DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dev DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-pic DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dev-ppc64 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc-dev-bin DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-ppc64 DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-prof DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-dbg DPKG is earlier than 2.11.1-0ubuntu7.1 AND libc6-udeb DPKG is earlier than 2.11.1-0ubuntu7.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.10.1-0ubuntu17 AND eglibc-source DPKG is earlier than 2.10.1-0ubuntu17 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libc-bin DPKG is earlier than 2.10.1-0ubuntu17 AND libnss-files-udeb DPKG is earlier than 2.10.1-0ubuntu17 AND nscd DPKG is earlier than 2.10.1-0ubuntu17 AND libnss-dns-udeb DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-dev DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-pic DPKG is earlier than 2.10.1-0ubuntu17 AND libc-dev-bin DPKG is earlier than 2.10.1-0ubuntu17 AND libc6 DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-prof DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-dbg DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-udeb DPKG is earlier than 2.10.1-0ubuntu17 OR Architecture depended section Installed architecture is sparc AND Packages section libc6-dev-sparc64 DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-sparc64v DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-sparcv9b DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-sparcv9v2 DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-sparc64b DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-sparc64v2 DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-sparc64 DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-sparcv9v DPKG is earlier than 2.10.1-0ubuntu17 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.10.1-0ubuntu17 AND libc6-ppc64 DPKG is earlier than 2.10.1-0ubuntu17 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section zoneinfo-udeb DPKG is earlier than 2.3.6-0ubuntu20.6 AND glibc-doc DPKG is earlier than 2.3.6-0ubuntu20.6 OR Architecture depended section Installed architecture is sparc AND Packages section libnss-files-udeb DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-dev-sparc64 DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-sparc64v DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-sparcv9b DPKG is earlier than 2.3.6-0ubuntu20.6 AND nscd DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6 DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-sparc64b DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-dev DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-sparcv9v DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-pic DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-dbg DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-prof DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-sparc64 DPKG is earlier than 2.3.6-0ubuntu20.6 AND libnss-dns-udeb DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-udeb DPKG is earlier than 2.3.6-0ubuntu20.6 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libnss-files-udeb DPKG is earlier than 2.3.6-0ubuntu20.6 AND nscd DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6 DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-dev DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-pic DPKG is earlier than 2.3.6-0ubuntu20.6 AND libnss-dns-udeb DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-prof DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-dbg DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-udeb DPKG is earlier than 2.3.6-0ubuntu20.6 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.3.6-0ubuntu20.6 AND libc6-ppc64 DPKG is earlier than 2.3.6-0ubuntu20.6 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.9-4ubuntu6.2 AND glibc-source DPKG is earlier than 2.9-4ubuntu6.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libnss-files-udeb DPKG is earlier than 2.9-4ubuntu6.2 AND nscd DPKG is earlier than 2.9-4ubuntu6.2 AND libc6 DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-dev DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-pic DPKG is earlier than 2.9-4ubuntu6.2 AND libnss-dns-udeb DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-prof DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-dbg DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-udeb DPKG is earlier than 2.9-4ubuntu6.2 OR Architecture depended section Installed architecture is sparc AND Packages section libc6-dev-sparc64 DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-sparc64v DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-sparcv9b DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-sparcv9v2 DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-sparc64b DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-sparc64v2 DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-sparc64 DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-sparcv9v DPKG is earlier than 2.9-4ubuntu6.2 OR Supported platform section Installed architecture is powerpc AND Packages section libc6-dev-ppc64 DPKG is earlier than 2.9-4ubuntu6.2 AND libc6-ppc64 DPKG is earlier than 2.9-4ubuntu6.2

Definition Id: oval:org.mitre.oval:def:13533

Oval ID:	oval:org.mitre.oval:def:13533
Title:	DSA-2058-1 glibc, eglibc -- multiple
Description:	Several vulnerabilities have been discovered in the GNU C Library and its derivatives. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2008-1391, CVE-2009-4880, CVE-2009-4881 Maksymilian Arciemowicz discovered that the GNU C library did not correctly handle integer overflows in the strfmon family of functions. If a user or automated system were tricked into processing a specially crafted format string, a remote attacker could crash applications, leading to a denial of service. CVE-2010-0296 Jeff Layton and Dan Rosenberg discovered that the GNU C library did not correctly handle newlines in the mntent family of functions. If a local attacker were able to inject newlines into a mount entry through other vulnerable mount helpers, they could disrupt the system or possibly gain root privileges. CVE-2010-0830 Dan Rosenberg discovered that the GNU C library did not correctly validate certain ELF program headers. If a user or automated system were tricked into verifying a specially crafted ELF program, a remote attacker could execute arbitrary code with user privileges. For the stable distribution, these problems have been fixed in version 2.7-18lenny4 of the glibc package. For the testing distribution, these problems will be fixed soon. For the unstable distribution, these problems have been fixed in version 2.1.11-1 of the eglibc package. We recommend that you upgrade your glibc or eglibc packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2058-1 CVE-2008-1391 CVE-2009-4880 CVE-2009-4881 CVE-2010-0296 CVE-2010-0830	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	glibc eglibc
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND Packages section glibc-doc DPKG is earlier than 2.7-18lenny4 AND glibc-source DPKG is earlier than 2.7-18lenny4 AND locales DPKG is earlier than 2.7-18lenny4 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libc6-prof DPKG is earlier than 2.7-18lenny4 AND nscd DPKG is earlier than 2.7-18lenny4 AND libc6-dev DPKG is earlier than 2.7-18lenny4 AND libc6-pic DPKG is earlier than 2.7-18lenny4 AND libc6 DPKG is earlier than 2.7-18lenny4 AND locales-all DPKG is earlier than 2.7-18lenny4 AND libc6-dbg DPKG is earlier than 2.7-18lenny4 OR Architecture depended section Installed architecture is s390 AND Packages section libc6-dev-s390x DPKG is earlier than 2.7-18lenny4 AND libc6-s390x DPKG is earlier than 2.7-18lenny4 OR Supported platform section Installed architecture is mipsel AND Packages section libc6-mips64 DPKG is earlier than 2.7-18lenny4 AND libc6-dev-mips64 DPKG is earlier than 2.7-18lenny4 AND libc6-dev-mipsn32 DPKG is earlier than 2.7-18lenny4 AND libc6-mipsn32 DPKG is earlier than 2.7-18lenny4

Definition Id: oval:org.mitre.oval:def:13649

Oval ID:	oval:org.mitre.oval:def:13649
Title:	USN-1064-1 -- openssl vulnerability
Description:	Neel Mehta discovered that incorrectly formatted ClientHello handshake messages could cause OpenSSL to parse past the end of the message. This could allow a remote attacker to cause a crash and denial of service by triggering invalid memory accesses.
Family:	unix	Class:	patch
Reference(s):	USN-1064-1 CVE-2011-0014	Version:	5
Platform(s):	Ubuntu 10.10 Ubuntu 10.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 10.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8o-1ubuntu4.4 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is armel AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libssl-dev DPKG is earlier than 0.9.8o-1ubuntu4.4 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8o-1ubuntu4.4 AND openssl DPKG is earlier than 0.9.8o-1ubuntu4.4 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8o-1ubuntu4.4 AND libssl0.9.8 DPKG is earlier than 0.9.8o-1ubuntu4.4 AND libssl0.9.8-udeb DPKG is earlier than 0.9.8o-1ubuntu4.4 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8k-7ubuntu8.6 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is armel AND Packages section libssl-dev DPKG is earlier than 0.9.8k-7ubuntu8.6 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8k-7ubuntu8.6 AND openssl DPKG is earlier than 0.9.8k-7ubuntu8.6 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.6 AND libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.6 AND libssl0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.6

Definition Id: oval:org.mitre.oval:def:13860

Oval ID:	oval:org.mitre.oval:def:13860
Title:	USN-1168-1 -- linux vulnerabilities
Description:	linux: Linux kernel Multiple kernel flaws have been fixed.
Family:	unix	Class:	patch
Reference(s):	USN-1168-1 CVE-2011-1017 CVE-2011-1090 CVE-2011-1163 CVE-2011-1494 CVE-2011-1495 CVE-2011-1593 CVE-2011-1598 CVE-2011-1748 CVE-2011-1745 CVE-2011-2022 CVE-2011-1746 CVE-2011-1759 CVE-2011-1770 CVE-2011-1776 CVE-2011-3363	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.32-33-sparc64 DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-generic DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-virtual DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-powerpc DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-generic-pae DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-powerpc64-smp DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-versatile DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-lpia DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-ia64 DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-preempt DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-powerpc-smp DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-sparc64-smp DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-386 DPKG is earlier than 2.6.32-33.70 AND linux-image-2.6.32-33-server DPKG is earlier than 2.6.32-33.70

Definition Id: oval:org.mitre.oval:def:14087

Oval ID:	oval:org.mitre.oval:def:14087
Title:	USN-1161-1 -- linux-ec2 vulnerabilities
Description:	linux-ec2: Linux kernel for EC2 Multiple kernel flaws have been fixed.
Family:	unix	Class:	patch
Reference(s):	USN-1161-1 CVE-2010-3881 CVE-2011-1017 CVE-2011-1090 CVE-2011-1163 CVE-2011-1494 CVE-2011-1495 CVE-2011-1593 CVE-2011-1598 CVE-2011-1748 CVE-2011-1745 CVE-2011-2022 CVE-2011-1746 CVE-2011-1759 CVE-2011-1770 CVE-2011-1776 CVE-2011-3363	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	linux-ec2
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all AND linux-image-2.6.32-317-ec2 DPKG is earlier than 2.6.32-317.36

Definition Id: oval:org.mitre.oval:def:14673

Oval ID:	oval:org.mitre.oval:def:14673
Title:	USN-1344-1 -- linux vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1344-1 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.32-38-powerpc DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-386 DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-sparc64 DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-generic-pae DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-preempt DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-lpia DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-sparc64-smp DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-powerpc64-smp DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-versatile DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-generic DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-virtual DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-server DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-powerpc-smp DPKG is earlier than 2.6.32-38.83 AND linux-image-2.6.32-38-ia64 DPKG is earlier than 2.6.32-38.83

Definition Id: oval:org.mitre.oval:def:14810

Oval ID:	oval:org.mitre.oval:def:14810
Title:	USN-1186-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Multiple kernel flaws have been fixed.
Family:	unix	Class:	patch
Reference(s):	USN-1186-1 CVE-2010-4073 CVE-2010-4165 CVE-2010-4238 CVE-2010-4249 CVE-2010-4649 CVE-2011-1044 CVE-2011-0711 CVE-2011-1010 CVE-2011-1090 CVE-2011-1170 CVE-2011-1171 CVE-2011-1172 CVE-2011-2534 CVE-2011-1173 CVE-2011-2484	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 8.04 is installed AND Installed architecture is all Packages section linux-image-2.6.24-29-sparc64 DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-rt DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-lpia DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-itanium DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-sparc64-smp DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-hppa32 DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-lpiacompat DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-generic DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-xen DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-powerpc DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-powerpc-smp DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-hppa64 DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-server DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-powerpc64-smp DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-386 DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-virtual DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-mckinley DPKG is earlier than 2.6.24-29.92 AND linux-image-2.6.24-29-openvz DPKG is earlier than 2.6.24-29.92

Definition Id: oval:org.mitre.oval:def:14862

Oval ID:	oval:org.mitre.oval:def:14862
Title:	USN-1318-1 -- Linux kernel (FSL-IMX51) vulnerabilities
Description:	linux-fsl-imx51: Linux kernel for IMX51 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1318-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all AND linux-image-2.6.31-612-imx51 DPKG is earlier than 2.6.31-612.32

Definition Id: oval:org.mitre.oval:def:14884

Oval ID:	oval:org.mitre.oval:def:14884
Title:	USN-1363-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1363-1 CVE-2011-4097 CVE-2011-4622 CVE-2012-0038 CVE-2012-0055 CVE-2012-0207	Version:	5
Platform(s):	Ubuntu 11.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.10 is installed AND Installed architecture is all Packages section linux-image-3.0.0-16-virtual DPKG is earlier than 3.0.0-16.28 AND linux-image-3.0.0-16-powerpc64-smp DPKG is earlier than 3.0.0-16.28 AND linux-image-3.0.0-16-powerpc DPKG is earlier than 3.0.0-16.28 AND linux-image-3.0.0-16-generic-pae DPKG is earlier than 3.0.0-16.28 AND linux-image-3.0.0-16-omap DPKG is earlier than 3.0.0-16.28 AND linux-image-3.0.0-16-generic DPKG is earlier than 3.0.0-16.28 AND linux-image-3.0.0-16-powerpc-smp DPKG is earlier than 3.0.0-16.28 AND linux-image-3.0.0-16-server DPKG is earlier than 3.0.0-16.28

Definition Id: oval:org.mitre.oval:def:14887

Oval ID:	oval:org.mitre.oval:def:14887
Title:	DSA-2417-1 libxml2 -- computational denial of service
Description:	It was discovered that the internal hashing routine of libxml2, a library providing an extensive API to handle XML data, is vulnerable to predictable hash collisions. Given an attacker with knowledge of the hashing algorithm, it is possible to craft input that creates a large amount of collisions. As a result it is possible to perform denial of service attacks against applications using libxml2 functionality because of the computational overhead.
Family:	unix	Class:	patch
Reference(s):	DSA-2417-1 CVE-2012-0841	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	libxml2
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND libxml2 DPKG is earlier than 2.7.8.dfsg-2+squeeze3

Definition Id: oval:org.mitre.oval:def:15006

Oval ID:	oval:org.mitre.oval:def:15006
Title:	USN-1356-1 -- Linux kernel (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1356-1 CVE-2012-0038 CVE-2012-0044 CVE-2012-0207	Version:	5
Platform(s):	Ubuntu 11.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.04 is installed AND Installed architecture is all AND linux-image-2.6.38-1209-omap4 DPKG is earlier than 2.6.38-1209.21

Definition Id: oval:org.mitre.oval:def:15013

Oval ID:	oval:org.mitre.oval:def:15013
Title:	USN-1386-1 -- Linux kernel (Natty backport) vulnerabilities
Description:	linux-lts-backport-natty: Linux kernel backport from Natty Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1386-1 CVE-2011-2498 CVE-2011-2518 CVE-2011-3353 CVE-2011-4097 CVE-2011-4622 CVE-2012-0038 CVE-2012-0044 CVE-2012-0207	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.38-13-virtual DPKG is earlier than 2.6.38-13.56~lucid1 AND linux-image-2.6.38-13-server DPKG is earlier than 2.6.38-13.56~lucid1 AND linux-image-2.6.38-13-generic-pae DPKG is earlier than 2.6.38-13.56~lucid1 AND linux-image-2.6.38-13-generic DPKG is earlier than 2.6.38-13.56~lucid1

Definition Id: oval:org.mitre.oval:def:15037

Oval ID:	oval:org.mitre.oval:def:15037
Title:	USN-1281-1 -- Linux (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1281-1 CVE-2011-2183 CVE-2011-2479 CVE-2011-2491 CVE-2011-2494 CVE-2011-2495 CVE-2011-2496 CVE-2011-2517 CVE-2011-2905 CVE-2011-2909 CVE-2011-3363	Version:	5
Platform(s):	Ubuntu 11.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.04 is installed AND Installed architecture is all AND linux-image-2.6.38-1209-omap4 DPKG is earlier than 2.6.38-1209.17

Definition Id: oval:org.mitre.oval:def:15043

Oval ID:	oval:org.mitre.oval:def:15043
Title:	USN-1280-1 -- Linux (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1280-1 CVE-2011-1585 CVE-2011-2496	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.10 is installed AND Installed architecture is all AND linux-image-2.6.35-903-omap4 DPKG is earlier than 2.6.35-903.27

Definition Id: oval:org.mitre.oval:def:15162

Oval ID:	oval:org.mitre.oval:def:15162
Title:	USN-1364-1 -- Linux kernel (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1364-1 CVE-2011-4097 CVE-2012-0038 CVE-2012-0055 CVE-2012-0056 CVE-2012-0207	Version:	5
Platform(s):	Ubuntu 11.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.10 is installed AND Installed architecture is all AND linux-image-3.0.0-1207-omap4 DPKG is earlier than 3.0.0-1207.16

Definition Id: oval:org.mitre.oval:def:15178

Oval ID:	oval:org.mitre.oval:def:15178
Title:	DSA-2441-1 gnutls26 -- missing bounds check
Description:	Matthew Hall discovered that GNUTLS does not properly handle truncated GenericBlockCipher structures nested inside TLS records, leading to crashes in applications using the GNUTLS library.
Family:	unix	Class:	patch
Reference(s):	DSA-2441-1 CVE-2012-1573	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	gnutls26
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND gnutls26 DPKG is earlier than 2.8.6-1+squeeze2

Definition Id: oval:org.mitre.oval:def:15197

Oval ID:	oval:org.mitre.oval:def:15197
Title:	USN-1268-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1268-1 CVE-2011-1585 CVE-2011-1767 CVE-2011-1768 CVE-2011-2491 CVE-2011-2496 CVE-2011-2525 CVE-2011-3209	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 8.04 is installed AND Installed architecture is all Packages section linux-image-2.6.24-30-virtual DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-server DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-mckinley DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-hppa64 DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-xen DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-powerpc-smp DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-lpia DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-sparc64 DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-rt DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-openvz DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-lpiacompat DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-sparc64-smp DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-386 DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-powerpc DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-hppa32 DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-itanium DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-powerpc64-smp DPKG is earlier than 2.6.24-30.96 AND linux-image-2.6.24-30-generic DPKG is earlier than 2.6.24-30.96

Definition Id: oval:org.mitre.oval:def:15214

Oval ID:	oval:org.mitre.oval:def:15214
Title:	USN-1319-1 -- Linux kernel (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1319-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 11.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.04 is installed AND Installed architecture is all AND linux-image-2.6.38-1209-omap4 DPKG is earlier than 2.6.38-1209.20

Definition Id: oval:org.mitre.oval:def:15220

Oval ID:	oval:org.mitre.oval:def:15220
Title:	USN-1345-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1345-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 11.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.04 is installed AND Installed architecture is all Packages section linux-image-2.6.38-13-virtual DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-server DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-omap DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-powerpc-smp DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-powerpc DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-powerpc64-smp DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-generic-pae DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-versatile DPKG is earlier than 2.6.38-13.54 AND linux-image-2.6.38-13-generic DPKG is earlier than 2.6.38-13.54

Definition Id: oval:org.mitre.oval:def:15235

Oval ID:	oval:org.mitre.oval:def:15235
Title:	USN-1323-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1323-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-3359 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 8.04 is installed AND Installed architecture is all Packages section linux-image-2.6.24-30-virtual DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-server DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-mckinley DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-hppa64 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-xen DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-powerpc-smp DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-lpia DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-sparc64 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-rt DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-openvz DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-lpiacompat DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-sparc64-smp DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-386 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-powerpc DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-hppa32 DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-itanium DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-powerpc64-smp DPKG is earlier than 2.6.24-30.98 AND linux-image-2.6.24-30-generic DPKG is earlier than 2.6.24-30.98

Definition Id: oval:org.mitre.oval:def:15237

Oval ID:	oval:org.mitre.oval:def:15237
Title:	USN-1396-1 -- GNU C Library vulnerabilities
Description:	eglibc: Embedded GNU C Library: sources - glibc: GNU C Library: Documentation Multiple vulnerabilities were discovered and fixed in the GNU C Library.
Family:	unix	Class:	patch
Reference(s):	USN-1396-1 CVE-2009-5029 CVE-2010-0015 CVE-2011-1071 CVE-2011-1659 CVE-2011-1089 CVE-2011-1095 CVE-2011-1658 CVE-2011-2702 CVE-2011-4609 CVE-2012-0864	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 11.10 Ubuntu 8.04 Ubuntu 10.04 Ubuntu 10.10	Product(s):	GNU
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND libc6 DPKG is earlier than 2.13-0ubuntu13.1 OR Release section Ubuntu 11.10 is installed AND Installed architecture is all AND libc6 DPKG is earlier than 2.13-20ubuntu5.1 OR Release section Ubuntu 8.04 is installed AND Installed architecture is all AND libc6 DPKG is earlier than 2.7-10ubuntu8.1 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND Packages section libc-bin DPKG is earlier than 2.11.1-0ubuntu7.10 AND libc6 DPKG is earlier than 2.11.1-0ubuntu7.10 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND Packages section libc-bin DPKG is earlier than 2.12.1-0ubuntu10.4 AND libc6 DPKG is earlier than 2.12.1-0ubuntu10.4

Definition Id: oval:org.mitre.oval:def:15257

Oval ID:	oval:org.mitre.oval:def:15257
Title:	DSA-2392-1 openssl -- out-of-bounds read
Description:	Antonio Martin discovered a denial-of-service vulnerability in OpenSSL, an implementation of TLS and related protocols. A malicious client can cause the DTLS server implementation to crash. Regular, TCP-based TLS is not affected by this issue.
Family:	unix	Class:	patch
Reference(s):	DSA-2392-1 CVE-2012-0050	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8g-15+lenny16 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8o-4squeeze7

Definition Id: oval:org.mitre.oval:def:15268

Oval ID:	oval:org.mitre.oval:def:15268
Title:	DSA-2440-1 libtasn1-3 – missing bounds check
Description:	Matthew Hall discovered that many callers of the asn1_get_length_der function did not check the result against the overall buffer length before processing it further. This could result in out-of-bounds memory accesses and application crashes. Applications using GNUTLS are exposed to this issue.
Family:	unix	Class:	patch
Reference(s):	DSA-2440-1 CVE-2012-1569	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	libtasn1-3
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND libtasn1-3 DPKG is earlier than 2.7-1+squeeze+1

Definition Id: oval:org.mitre.oval:def:15269

Oval ID:	oval:org.mitre.oval:def:15269
Title:	USN-1328-1 -- Linux kernel (Marvell DOVE) vulnerabilities
Description:	linux-mvl-dove: Linux kernel for DOVE Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1328-1 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.10 is installed AND Installed architecture is all AND linux-image-2.6.32-422-dove DPKG is earlier than 2.6.32-422.40

Definition Id: oval:org.mitre.oval:def:15286

Oval ID:	oval:org.mitre.oval:def:15286
Title:	DSA-2390-1 openssl -- several
Description:	Several vulnerabilities were discovered in OpenSSL, an implementation of TLS and related protocols. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2011-4108 The DTLS implementation performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack. CVE-2011-4109 A double free vulnerability when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to cause applications crashes and potentially allow execution of arbitrary code by triggering failure of a policy check. CVE-2011-4354 On 32-bit systems, the operations on NIST elliptic curves P-256 and P-384 are not correctly implemented, potentially leaking the private ECC key of a TLS server. CVE-2011-4576 The SSL 3.0 implementation does not properly initialise data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer. CVE-2011-4619 The Server Gated Cryptography implementation in OpenSSL does not properly handle handshake restarts, unnecessarily simplifying CPU exhaustion attacks.
Family:	unix	Class:	patch
Reference(s):	DSA-2390-1 CVE-2011-4108 CVE-2011-4109 CVE-2011-4354 CVE-2011-4576 CVE-2011-4619	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8g-15+lenny15 OR Release section Debian 6.0 is installed AND GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND Installed architecture is all AND openssl DPKG is earlier than 0.9.8o-4squeeze5

Definition Id: oval:org.mitre.oval:def:15311

Oval ID:	oval:org.mitre.oval:def:15311
Title:	USN-1324-1 -- Linux kernel (EC2) vulnerabilities
Description:	linux-ec2: Linux kernel for EC2 Two security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1324-1 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all AND linux-image-2.6.32-342-ec2 DPKG is earlier than 2.6.32-342.43

Definition Id: oval:org.mitre.oval:def:15318

Oval ID:	oval:org.mitre.oval:def:15318
Title:	USN-1337-1 -- Linux kernel (Natty backport) vulnerabilities
Description:	linux-lts-backport-natty: Linux kernel backport from Natty Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1337-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.38-13-virtual DPKG is earlier than 2.6.38-13.54~lucid1 AND linux-image-2.6.38-13-server DPKG is earlier than 2.6.38-13.54~lucid1 AND linux-image-2.6.38-13-generic-pae DPKG is earlier than 2.6.38-13.54~lucid1 AND linux-image-2.6.38-13-generic DPKG is earlier than 2.6.38-13.54~lucid1

Definition Id: oval:org.mitre.oval:def:15330

Oval ID:	oval:org.mitre.oval:def:15330
Title:	USN-1380-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1380-1 CVE-2011-2518 CVE-2011-4097 CVE-2012-0207	Version:	5
Platform(s):	Ubuntu 11.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 11.04 is installed AND Installed architecture is all Packages section linux-image-2.6.38-13-virtual DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-server DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-omap DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-powerpc-smp DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-powerpc DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-powerpc64-smp DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-generic-pae DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-versatile DPKG is earlier than 2.6.38-13.56 AND linux-image-2.6.38-13-generic DPKG is earlier than 2.6.38-13.56

Definition Id: oval:org.mitre.oval:def:15337

Oval ID:	oval:org.mitre.oval:def:15337
Title:	USN-1332-1 -- Linux kernel (Maverick backport) vulnerabilities
Description:	linux-lts-backport-maverick: Linux kernel backport from Maverick Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1332-1 CVE-2011-1162 CVE-2011-1759 CVE-2011-2182 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.04 is installed AND Installed architecture is all Packages section linux-image-2.6.35-32-virtual DPKG is earlier than 2.6.35-32.64~lucid1 AND linux-image-2.6.35-32-server DPKG is earlier than 2.6.35-32.64~lucid1 AND linux-image-2.6.35-32-generic-pae DPKG is earlier than 2.6.35-32.64~lucid1 AND linux-image-2.6.35-32-generic DPKG is earlier than 2.6.35-32.64~lucid1

Definition Id: oval:org.mitre.oval:def:15353

Oval ID:	oval:org.mitre.oval:def:15353
Title:	USN-1325-1 -- Linux kernel (OMAP4) vulnerabilities
Description:	linux-ti-omap4: Linux kernel for OMAP4 Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1325-1 CVE-2011-1162 CVE-2011-2203 CVE-2011-3353 CVE-2011-3359 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.10 is installed AND Installed architecture is all AND linux-image-2.6.35-903-omap4 DPKG is earlier than 2.6.35-903.29

Definition Id: oval:org.mitre.oval:def:15438

Oval ID:	oval:org.mitre.oval:def:15438
Title:	USN-1341-1 -- Linux kernel vulnerabilities
Description:	linux: Linux kernel Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1341-1 CVE-2011-1162 CVE-2011-1759 CVE-2011-2182 CVE-2011-2203 CVE-2011-4110	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	Linux
Definition Synopsis:
Ubuntu 10.10 is installed AND Installed architecture is all Packages section linux-image-2.6.35-32-powerpc DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-powerpc64-smp DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-generic-pae DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-versatile DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-generic DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-virtual DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-server DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-omap DPKG is earlier than 2.6.35-32.64 AND linux-image-2.6.35-32-powerpc-smp DPKG is earlier than 2.6.35-32.64

Definition Id: oval:org.mitre.oval:def:15454

Oval ID:	oval:org.mitre.oval:def:15454
Title:	USN-1376-1 -- libxml2 vulnerability
Description:	libxml2: GNOME XML library libxml2 could be made to cause a denial of service by consuming excessive CPU resources.
Family:	unix	Class:	patch
Reference(s):	USN-1376-1 CVE-2012-0841	Version:	5
Platform(s):	Ubuntu 11.04 Ubuntu 11.10 Ubuntu 8.04 Ubuntu 10.04 Ubuntu 10.10	Product(s):	libxml2
Definition Synopsis:
Release section Ubuntu 11.04 is installed AND Installed architecture is all AND libxml2 DPKG is earlier than 2.7.8.dfsg-2ubuntu0.3 OR Release section Ubuntu 11.10 is installed AND Installed architecture is all AND libxml2 DPKG is earlier than 2.7.8.dfsg-4ubuntu0.2 OR Release section Ubuntu 8.04 is installed AND Installed architecture is all AND libxml2 DPKG is earlier than 2.6.31.dfsg-2ubuntu1.8 OR Release section Ubuntu 10.04 is installed AND Installed architecture is all AND libxml2 DPKG is earlier than 2.7.6.dfsg-1ubuntu1.4 OR Release section Ubuntu 10.10 is installed AND Installed architecture is all AND libxml2 DPKG is earlier than 2.7.7.dfsg-4ubuntu0.4

Definition Id: oval:org.mitre.oval:def:17742

Oval ID:	oval:org.mitre.oval:def:17742
Title:	USN-1418-1 -- gnutls13, gnutls26 vulnerabilities
Description:	The GnuTLS library could be made to crash under certain conditions.
Family:	unix	Class:	patch
Reference(s):	USN-1418-1 CVE-2011-4128 CVE-2012-1573	Version:	7
Platform(s):	Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.10 Ubuntu 10.04 Ubuntu 8.04	Product(s):	gnutls26 gnutls13
Definition Synopsis:
Release section Ubuntu 11.10 is installed AND libgnutls26 DPKG is earlier than 2.10.5-1ubuntu3.1 AND Release section Ubuntu 11.04 is installed AND libgnutls26 DPKG is earlier than 2.8.6-1ubuntu2.1 AND Release section Ubuntu 10.10 is installed AND libgnutls26 DPKG is earlier than 2.8.6-1ubuntu0.1 AND Release section Ubuntu 10.04 is installed AND libgnutls26 DPKG is earlier than 2.8.5-2ubuntu0.1 AND Release section Ubuntu 8.04 is installed AND libgnutls13 DPKG is earlier than 2.0.4-1ubuntu2.7

Definition Id: oval:org.mitre.oval:def:17827

Oval ID:	oval:org.mitre.oval:def:17827
Title:	USN-1436-1 -- libtasn1-3 vulnerability
Description:	Libtasn1 could be made to crash or run programs as your login if it received specially crafted input.
Family:	unix	Class:	patch
Reference(s):	USN-1436-1 CVE-2012-1569	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04	Product(s):	libtasn1-3
Definition Synopsis:
Release section Ubuntu 12.04 is installed AND libtasn1-3 DPKG is earlier than 2.10-1ubuntu1.1 AND Release section Ubuntu 11.10 is installed AND libtasn1-3 DPKG is earlier than 2.9-4ubuntu0.1 AND Release section Ubuntu 11.04 is installed AND libtasn1-3 DPKG is earlier than 2.7-1ubuntu1.1 AND Release section Ubuntu 10.04 is installed AND libtasn1-3 DPKG is earlier than 2.4-1ubuntu0.1 AND Release section Ubuntu 8.04 is installed AND libtasn1-3 DPKG is earlier than 1.1-1ubuntu0.1

Definition Id: oval:org.mitre.oval:def:17842

Oval ID:	oval:org.mitre.oval:def:17842
Title:	USN-1695-1 -- rpm vulnerabilities
Description:	RPM could be made to crash or run programs if it opened a specially crafted package file.
Family:	unix	Class:	patch
Reference(s):	USN-1695-1 CVE-2011-3378 CVE-2012-0060 CVE-2012-0061 CVE-2012-0815	Version:	7
Platform(s):	Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04	Product(s):	rpm
Definition Synopsis:
Release section Ubuntu 12.04 is installed AND rpm DPKG is earlier than 4.9.1.1-1ubuntu0.1 AND Release section Ubuntu 11.10 is installed AND rpm DPKG is earlier than 4.9.0-7ubuntu0.1 AND Release section Ubuntu 10.04 is installed AND rpm DPKG is earlier than 4.7.2-1lubuntu0.1

Definition Id: oval:org.mitre.oval:def:17911

Oval ID:	oval:org.mitre.oval:def:17911
Title:	USN-1243-1 -- linux vulnerabilities
Description:	Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1243-1 CVE-2010-4250 CVE-2011-1479 CVE-2011-2494 CVE-2011-2495 CVE-2011-2695 CVE-2011-2905 CVE-2011-2909 CVE-2011-3188 CVE-2011-3363	Version:	7
Platform(s):	Ubuntu 10.10	Product(s):	linux
Definition Synopsis:
Ubuntu 10.10 is installed Packages match section linux-image-2.6.35-30-generic DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-generic-pae DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-omap DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-powerpc DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-powerpc-smp DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-powerpc64-smp DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-server DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-versatile DPKG is earlier than 2.6.35-30.61 AND linux-image-2.6.35-30-virtual DPKG is earlier than 2.6.35-30.61

Definition Id: oval:org.mitre.oval:def:17928

Oval ID:	oval:org.mitre.oval:def:17928
Title:	USN-1424-1 -- openssl vulnerabilities
Description:	An application using OpenSSL could be made to crash or run programs if it opened a specially crafted file.
Family:	unix	Class:	patch
Reference(s):	USN-1424-1 CVE-2006-7250 CVE-2012-1165 CVE-2012-2110	Version:	7
Platform(s):	Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 11.10 is installed AND libssl1.0.0 DPKG is earlier than 1.0.0e-2ubuntu4.4 AND Release section Ubuntu 11.04 is installed AND libssl0.9.8 DPKG is earlier than 0.9.8o-5ubuntu1.4 AND Release section Ubuntu 10.04 is installed AND libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.10 AND Release section Ubuntu 8.04 is installed AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.17

Definition Id: oval:org.mitre.oval:def:18001

Oval ID:	oval:org.mitre.oval:def:18001
Title:	DSA-2454-1 openssl - multiple
Description:	Multiple vulnerabilities have been found in OpenSSL.
Family:	unix	Class:	patch
Reference(s):	DSA-2454-1 CVE-2012-0884 CVE-2012-1165 CVE-2012-2110 CVE-2012-2131 CVE-2011-4619	Version:	7
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openssl DPKG is earlier than 0.9.8o-4squeeze11

Definition Id: oval:org.mitre.oval:def:18910

Oval ID:	oval:org.mitre.oval:def:18910
Title:	OpenSSL vulnerability before 0.9.8q, and 1.0.x before 1.0.0c in VisualSVN Server (CVE-2010-4180)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed If the version of OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c in VisualSVN Server Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.8.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.8.16 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.7.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.7.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.6.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.0.0 in VisualSVN Server AND Check if OpenSSL is less than 1.0.0.3 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.1.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.2.2 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.4.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.1 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:18985

Oval ID:	oval:org.mitre.oval:def:18985
Title:	OpenSSL vulnerability 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c in VisualSVN Server (CVE-2011-0014)
Description:	ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-0014	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed If the version of OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c in VisualSVN Server Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.8.8 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.8.17 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.0.0 in VisualSVN Server AND Check if OpenSSL is less than or equals to 1.0.0.3 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:19039

Oval ID:	oval:org.mitre.oval:def:19039
Title:	OpenSSL vulnerability before 1.0.0c in VisualSVN Server (CVE-2010-4252)
Description:	OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4252	Version:	5
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	VisualSVN Server
Definition Synopsis:
VisualSVN Server is installed If the version of OpenSSL before 1.0.0c in VisualSVN Server Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.8.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.8.16 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.7.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.7.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 0.9.6.0 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check the version of OpenSSL in VisualSVN Server Check if OpenSSL version is greater than or equals to 1.0.0.0 in VisualSVN Server AND Check if OpenSSL is less than 1.0.0.3 in VisualSVN Server AND Check if OpenSSL version is less than or equals to 0.9.6.13 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.1.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.2.2 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.3.1 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.4.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.0 in VisualSVN Server AND Check if OpenSSL version equals to 0.9.5.1 in VisualSVN Server

Definition Id: oval:org.mitre.oval:def:19202

Oval ID:	oval:org.mitre.oval:def:19202
Title:	HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS), Authentication Bypass
Description:	OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4252	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.001 AND openssl.OPENSSL-INC version is less than A.00.09.08q.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.001 OR Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.002 AND openssl.OPENSSL-INC version is less than A.00.09.08q.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.002 OR Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.003 AND openssl.OPENSSL-INC version is less than A.00.09.08q.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.003

Definition Id: oval:org.mitre.oval:def:19279

Oval ID:	oval:org.mitre.oval:def:19279
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	12
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19309

Oval ID:	oval:org.mitre.oval:def:19309
Title:	CRITICAL PATCH UPDATE JULY 2012
Description:	The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2699	Version:	3
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Patch 147440-15 or later installed Solaris 10 (SPARC) is installed AND NOT Patch 147440-15 or later installed OR Patch 147441-15 or later installed Solaris 10 (x86) is installed AND NOT Patch 147441-15 or later installed

Definition Id: oval:org.mitre.oval:def:19446

Oval ID:	oval:org.mitre.oval:def:19446
Title:	Perl Digest Module Code Injection Vulnerability
Description:	Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3597	Version:	5
Platform(s):	IBM AIX 5.3 IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
IBM AIX 5300-12 meets CVE-2011-3597 IBM AIX 5300-12 is installed AND perl.rte version is greater than or equal 5.8.8.0 AND perl.rte version is less than or equal to 5.8.8.122 OR IBM AIX 6100-05 meets CVE-2011-3597 IBM AIX 6100-05 is installed AND perl.rte version is greater than or equal 5.8.8.0 AND perl.rte version is less than or equal to 5.8.8.122 OR IBM AIX 6100-06 meets CVE-2011-3597 IBM AIX 6100-06 is installed AND perl.rte version is greater than or equal 5.8.8.0 AND perl.rte version is less than or equal to 5.8.8.122 OR IBM AIX 6100-07 meets CVE-2011-3597 IBM AIX 6100-07 is installed AND perl.rte version is greater than or equal 5.8.8.0 AND perl.rte version is less than or equal to 5.8.8.122 OR IBM AIX 6100-08 meets CVE-2011-3597 IBM AIX 6100-08 is installed AND perl.rte version is greater than or equal 5.8.8.0 AND perl.rte version is less than or equal to 5.8.8.122 OR IBM AIX 7100-00 meets CVE-2011-3597 IBM AIX 7100-00 is installed AND perl.rte version is greater than or equal 5.10.1.0 AND perl.rte version is less than or equal to 5.10.1.50 OR IBM AIX 7100-01 meets CVE-2011-3597 IBM AIX 7100-01 is installed AND perl.rte version is greater than or equal 5.10.1.0 AND perl.rte version is less than or equal to 5.10.1.50 OR IBM AIX 7100-02 meets CVE-2011-3597 IBM AIX 7100-02 is installed AND perl.rte version is greater than or equal 5.10.1.0 AND perl.rte version is less than or equal to 5.10.1.50

Definition Id: oval:org.mitre.oval:def:19547

Oval ID:	oval:org.mitre.oval:def:19547
Title:	HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, Denial of Service (DoS), Authentication Bypass
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.001 AND openssl.OPENSSL-INC version is less than A.00.09.08q.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.001 OR Criteria meets HP Security Bulletin HPSBUX02638 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.002 AND openssl.OPENSSL-INC version is less than A.00.09.08q.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.002 OR Criteria meets HP Security Bulletin HPSBUX02638 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08q.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08q.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08q.003 AND openssl.OPENSSL-INC version is less than A.00.09.08q.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08q.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08q.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08q.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08q.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08q.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08q.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08q.003

Definition Id: oval:org.mitre.oval:def:19592

Oval ID:	oval:org.mitre.oval:def:19592
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS)
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-2110	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02782 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08w.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08w.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08w.001 AND openssl.OPENSSL-INC version is less than A.00.09.08w.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08w.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08w.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08w.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08w.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08w.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08w.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08w.001 OR Criteria meets HP Security Bulletin HPSBUX02782 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08w.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08w.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08w.002 AND openssl.OPENSSL-INC version is less than A.00.09.08w.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08w.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08w.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08w.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08w.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08w.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08w.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08w.002 OR Criteria meets HP Security Bulletin HPSBUX02782 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08w.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08w.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08w.003 AND openssl.OPENSSL-INC version is less than A.00.09.08w.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08w.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08w.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08w.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08w.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08w.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08w.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08w.003

Definition Id: oval:org.mitre.oval:def:19722

Oval ID:	oval:org.mitre.oval:def:19722
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS)
Description:	OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0050	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02737 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08t.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08t.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08t.001 AND openssl.OPENSSL-INC version is less than A.00.09.08t.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08t.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08t.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08t.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08t.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08t.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08t.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08t.001 OR Criteria meets HP Security Bulletin HPSBUX02737 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08t.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08t.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08t.002 AND openssl.OPENSSL-INC version is less than A.00.09.08t.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08t.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08t.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08t.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08t.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08t.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08t.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08t.002 OR Criteria meets HP Security Bulletin HPSBUX02737 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08t.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08t.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08t.003 AND openssl.OPENSSL-INC version is less than A.00.09.08t.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08t.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08t.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08t.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08t.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08t.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08t.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08t.003

Definition Id: oval:org.mitre.oval:def:19733

Oval ID:	oval:org.mitre.oval:def:19733
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19737

Oval ID:	oval:org.mitre.oval:def:19737
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4577	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19752

Oval ID:	oval:org.mitre.oval:def:19752
Title:	VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201110204-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201110204-SG is not installed OR Patch ESX400-201203401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201203401-SG is not installed

Definition Id: oval:org.mitre.oval:def:19764

Oval ID:	oval:org.mitre.oval:def:19764
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4410	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208107-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208107-SG is not installed

Definition Id: oval:org.mitre.oval:def:19779

Oval ID:	oval:org.mitre.oval:def:19779
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service (memory and CPU consumption), and bypass the OOM Killer, via a crafted application.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2484	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:19785

Oval ID:	oval:org.mitre.oval:def:19785
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS)
Description:	ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0014	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02689 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08r.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08r.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08r.001 AND openssl.OPENSSL-INC version is less than A.00.09.08r.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08r.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08r.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08r.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08r.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08r.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08r.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08r.001 OR Criteria meets HP Security Bulletin HPSBUX02689 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08r.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08r.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08r.002 AND openssl.OPENSSL-INC version is less than A.00.09.08r.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08r.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08r.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08r.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08r.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08r.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08r.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08r.002 OR Criteria meets HP Security Bulletin HPSBUX02689 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08r.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08r.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08r.003 AND openssl.OPENSSL-INC version is less than A.00.09.08r.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08r.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08r.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08r.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08r.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08r.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08r.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08r.003

Definition Id: oval:org.mitre.oval:def:19801

Oval ID:	oval:org.mitre.oval:def:19801
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19820

Oval ID:	oval:org.mitre.oval:def:19820
Title:	HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.11 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.001 AND openssl.OPENSSL-INC version is less than A.00.09.08s.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.001 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.001 OR Criteria meets HP Security Bulletin HPSBUX02734 HP Release B.11.23 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.002 AND openssl.OPENSSL-INC version is less than A.00.09.08s.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.002 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.002 OR Criteria meets HP Security Bulletin HPSBUX02734 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-CER version is less than A.00.09.08s.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08s.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08s.003 AND openssl.OPENSSL-INC version is less than A.00.09.08s.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08s.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08s.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08s.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08s.003 AND openssl.OPENSSL-PVT version is less than A.00.09.08s.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08s.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08s.003

Definition Id: oval:org.mitre.oval:def:19831

Oval ID:	oval:org.mitre.oval:def:19831
Title:	VMware vCenter Server, ESXi and ESX address an NFC Protocol memory corruption and third party library security issues.
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-2110	Version:	4
Platform(s):	VMWare ESX Server 3.5	Product(s):
Definition Synopsis:
Patch ESX350-201302401-SG is not installed VMware ESX Server 3.5.0 is installed AND Patch ESX350-201302401-SG is not installed

Definition Id: oval:org.mitre.oval:def:19936

Oval ID:	oval:org.mitre.oval:def:19936
Title:	DSA-2454-2 openssl - incomplete fix
Description:	Multiple vulnerabilities have been found in OpenSSL.
Family:	unix	Class:	patch
Reference(s):	DSA-2454-2 CVE-2012-0884 CVE-2012-1165 CVE-2012-2110 CVE-2012-2131 CVE-2011-4619	Version:	5
Platform(s):	Debian GNU/Linux 6.0 Debian GNU/kFreeBSD 6.0	Product(s):	openssl
Definition Synopsis:
Debian 6.0 is installed GNU/Linux or GNU/kFreeBSD kernel Debian GNU/Linux is installed AND Debian GNU/kFreeBSD is installed AND openssl DPKG is earlier than 0:0.9.8o-4squeeze12

Definition Id: oval:org.mitre.oval:def:20110

Oval ID:	oval:org.mitre.oval:def:20110
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0841	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208102-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208102-SG is not installed OR Patch ESX400-201209402-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209402-SG is not installed

Definition Id: oval:org.mitre.oval:def:20158

Oval ID:	oval:org.mitre.oval:def:20158
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3209	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20194

Oval ID:	oval:org.mitre.oval:def:20194
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-1569	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208106-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208106-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20227

Oval ID:	oval:org.mitre.oval:def:20227
Title:	Multiple OpenSSL vulnerabilities
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20253

Oval ID:	oval:org.mitre.oval:def:20253
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3188	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20289

Oval ID:	oval:org.mitre.oval:def:20289
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	DISPUTED ldd in the GNU C Library (aka glibc or libc6) 2.13 and earlier allows local users to gain privileges via a Trojan horse executable file linked with a modified loader that omits certain LD_TRACE_LOADED_OBJECTS checks. NOTE: the GNU C Library vendor states "This is just nonsense. There are a gazillion other ways to introduce code if people are downloading arbitrary binaries and install them in appropriate directories or set LD_LIBRARY_PATH etc."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-5064	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208104-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208104-SG is not installed

Definition Id: oval:org.mitre.oval:def:20347

Oval ID:	oval:org.mitre.oval:def:20347
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0050	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20355

Oval ID:	oval:org.mitre.oval:def:20355
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denial of service (application crash) via a large SessionTicket.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4128	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208106-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208106-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20390

Oval ID:	oval:org.mitre.oval:def:20390
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20408

Oval ID:	oval:org.mitre.oval:def:20408
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) headerLoad, (2) rpmReadSignature, or (3) headerVerify function.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0060	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208105-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208105-SG is not installed OR Patch ESX400-201209404-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209404-SG is not installed

Definition Id: oval:org.mitre.oval:def:20409

Oval ID:	oval:org.mitre.oval:def:20409
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20458

Oval ID:	oval:org.mitre.oval:def:20458
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0864	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208104-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208104-SG is not installed

Definition Id: oval:org.mitre.oval:def:20487

Oval ID:	oval:org.mitre.oval:def:20487
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-5029	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208104-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208104-SG is not installed

Definition Id: oval:org.mitre.oval:def:20495

Oval ID:	oval:org.mitre.oval:def:20495
Title:	Multiple OpenSSL vulnerabilities
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20497

Oval ID:	oval:org.mitre.oval:def:20497
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0815	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208105-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208105-SG is not installed OR Patch ESX400-201209404-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209404-SG is not installed

Definition Id: oval:org.mitre.oval:def:20507

Oval ID:	oval:org.mitre.oval:def:20507
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes it easier for local users to trigger corruption of this file, as demonstrated by writes from a process with a small RLIMIT_FSIZE value, a different vulnerability than CVE-2010-0296.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-1089	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208104-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208104-SG is not installed

Definition Id: oval:org.mitre.oval:def:20511

Oval ID:	oval:org.mitre.oval:def:20511
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20547

Oval ID:	oval:org.mitre.oval:def:20547
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-2761	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208107-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208107-SG is not installed

Definition Id: oval:org.mitre.oval:def:20560

Oval ID:	oval:org.mitre.oval:def:20560
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3597	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208107-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208107-SG is not installed

Definition Id: oval:org.mitre.oval:def:20561

Oval ID:	oval:org.mitre.oval:def:20561
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4252	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20568

Oval ID:	oval:org.mitre.oval:def:20568
Title:	Multiple OpenSSL vulnerabilities
Description:	ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0014	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than 0.9.8.1301 AND OpenSSL-fips.base less than 12.9.8.1301

Definition Id: oval:org.mitre.oval:def:20583

Oval ID:	oval:org.mitre.oval:def:20583
Title:	RHSA-2012:0429: gnutls security update (Important)
Description:	gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0429-02 CESA-2012:0429 CVE-2011-4128 CVE-2012-1573	Version:	29
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	gnutls
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section gnutls is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-devel is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-utils is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-guile is earlier than 0:2.8.5-4.el6_2.2

Definition Id: oval:org.mitre.oval:def:20585

Oval ID:	oval:org.mitre.oval:def:20585
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-1573	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208106-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208106-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20617

Oval ID:	oval:org.mitre.oval:def:20617
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals, which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-3363	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20634

Oval ID:	oval:org.mitre.oval:def:20634
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0061	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208105-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208105-SG is not installed OR Patch ESX400-201209404-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209404-SG is not installed

Definition Id: oval:org.mitre.oval:def:20664

Oval ID:	oval:org.mitre.oval:def:20664
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in the eCryptfs subsystem in the Linux kernel before 3.1 allows local users to bypass intended file permissions via a mount.ecryptfs_private mount with a mismatched uid.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-1833	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20667

Oval ID:	oval:org.mitre.oval:def:20667
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4577	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20668

Oval ID:	oval:org.mitre.oval:def:20668
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-1583	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20676

Oval ID:	oval:org.mitre.oval:def:20676
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4609	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208104-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208104-SG is not installed

Definition Id: oval:org.mitre.oval:def:20683

Oval ID:	oval:org.mitre.oval:def:20683
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image with an "invalid log first block value."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4132	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20684

Oval ID:	oval:org.mitre.oval:def:20684
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Integer signedness error in the elf_get_dynamic_info function in elf/dynamic-link.h in ld.so in the GNU C Library (aka glibc or libc6) 2.0.1 through 2.11.1, when the --verify option is used, allows user-assisted remote attackers to execute arbitrary code via a crafted ELF program with a negative value for a certain d_tag structure member in the ELF header.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0830	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208104-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208104-SG is not installed

Definition Id: oval:org.mitre.oval:def:20694

Oval ID:	oval:org.mitre.oval:def:20694
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (BUG_ON and system crash) via a crafted mremap system call that expands a memory mapping.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2496	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20705

Oval ID:	oval:org.mitre.oval:def:20705
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20706

Oval ID:	oval:org.mitre.oval:def:20706
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4110	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20716

Oval ID:	oval:org.mitre.oval:def:20716
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-2110	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208103-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208103-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20720

Oval ID:	oval:org.mitre.oval:def:20720
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-2699	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20728

Oval ID:	oval:org.mitre.oval:def:20728
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directory tree of a process after this process performs an exec of a setuid program, which allows local users to obtain sensitive information or cause a denial of service via open, lseek, read, and write system calls.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-1020	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20732

Oval ID:	oval:org.mitre.oval:def:20732
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-0014	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20733

Oval ID:	oval:org.mitre.oval:def:20733
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0207	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20736

Oval ID:	oval:org.mitre.oval:def:20736
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The NFS implementation in Linux kernel before 2.6.31-rc6 calls certain functions without properly initializing certain data, which allows local users to cause a denial of service (NULL pointer dereference and O_DIRECT oops), as demonstrated using diotest4 from LTP.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4325	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20747

Oval ID:	oval:org.mitre.oval:def:20747
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The encode_share_access function in fs/nfs/nfs4xdr.c in the Linux kernel before 2.6.29 allows local users to cause a denial of service (BUG and system crash) by using the mknod system call with a pathname on an NFSv4 filesystem.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4324	Version:	4
Platform(s):	VMWare ESX Server 4.1 VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed OR Patch ESX400-201209401-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201209401-SG is not installed

Definition Id: oval:org.mitre.oval:def:20756

Oval ID:	oval:org.mitre.oval:def:20756
Title:	VMware vSphere and vCOps updates to third party libraries
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	4
Platform(s):	VMWare ESX Server 4.1	Product(s):
Definition Synopsis:
Patch ESX410-201208101-SG is not installed VMware ESX Server 4.1 is installed AND Patch ESX410-201208101-SG is not installed

Definition Id: oval:org.mitre.oval:def:20777

Oval ID:	oval:org.mitre.oval:def:20777
Title:	USN-1242-1 -- linux-lts-backport-maverick vulnerabilities
Description:	Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1242-1 CVE-2010-4250 CVE-2011-1479 CVE-2011-2494 CVE-2011-2495 CVE-2011-2695 CVE-2011-2905 CVE-2011-2909 CVE-2011-3188 CVE-2011-3363	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	linux-lts-backport-maverick
Definition Synopsis:
Ubuntu 10.04 is installed Packages match section linux-image-2.6.35-30-generic DPKG is earlier than 0:2.6.35-30.61~lucid1 AND linux-image-2.6.35-30-generic-pae DPKG is earlier than 0:2.6.35-30.61~lucid1 AND linux-image-2.6.35-30-server DPKG is earlier than 0:2.6.35-30.61~lucid1 AND linux-image-2.6.35-30-virtual DPKG is earlier than 0:2.6.35-30.61~lucid1

Definition Id: oval:org.mitre.oval:def:20817

Oval ID:	oval:org.mitre.oval:def:20817
Title:	Multiple OpenSSL vulnerabilities
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20828

Oval ID:	oval:org.mitre.oval:def:20828
Title:	Multiple OpenSSL vulnerabilities
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than 0.9.8.1301 AND OpenSSL-fips.base less than 12.9.8.1301

Definition Id: oval:org.mitre.oval:def:20867

Oval ID:	oval:org.mitre.oval:def:20867
Title:	USN-1244-1 -- linux-ti-omap4 vulnerabilities
Description:	Several security issues were fixed in the kernel.
Family:	unix	Class:	patch
Reference(s):	USN-1244-1 CVE-2010-3873 CVE-2011-2183 CVE-2011-2491 CVE-2011-2494 CVE-2011-2495 CVE-2011-2517 CVE-2011-2695 CVE-2011-2905 CVE-2011-2909 CVE-2011-3363	Version:	5
Platform(s):	Ubuntu 10.10	Product(s):	linux-ti-omap4
Definition Synopsis:
Ubuntu 10.10 is installed AND linux-image-2.6.35-903-omap4 DPKG is earlier than 0:2.6.35-903.26

Definition Id: oval:org.mitre.oval:def:20877

Oval ID:	oval:org.mitre.oval:def:20877
Title:	Multiple OpenSSL vulnerabilities
Description:	OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-0050	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20887

Oval ID:	oval:org.mitre.oval:def:20887
Title:	Multiple OpenSSL vulnerabilities
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
platforms IBM AIX 6.1 is installed AND IBM AIX 7.1 is installed AND filesets openssl.base less than or equal 0.9.8.1800 AND OpenSSL-fips.base less than or equal 12.9.8.1800

Definition Id: oval:org.mitre.oval:def:20938

Oval ID:	oval:org.mitre.oval:def:20938
Title:	RHSA-2012:0451: rpm security update (Important)
Description:	The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0451-03 CESA-2012:0451 CVE-2012-0060 CVE-2012-0061 CVE-2012-0815	Version:	42
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	rpm
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section rpm is earlier than 0:4.4.2.3-28.el5_8 AND rpm-python is earlier than 0:4.4.2.3-28.el5_8 AND rpm-libs is earlier than 0:4.4.2.3-28.el5_8 AND rpm-build is earlier than 0:4.4.2.3-28.el5_8 AND rpm-apidocs is earlier than 0:4.4.2.3-28.el5_8 AND popt is earlier than 0:1.10.2.3-28.el5_8 AND rpm-devel is earlier than 0:4.4.2.3-28.el5_8 AND Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section rpm-cron is earlier than 0:4.8.0-19.el6_2.1 AND rpm is earlier than 0:4.8.0-19.el6_2.1 AND rpm-libs is earlier than 0:4.8.0-19.el6_2.1 AND rpm-python is earlier than 0:4.8.0-19.el6_2.1 AND rpm-build is earlier than 0:4.8.0-19.el6_2.1 AND rpm-apidocs is earlier than 0:4.8.0-19.el6_2.1 AND rpm-devel is earlier than 0:4.8.0-19.el6_2.1

Definition Id: oval:org.mitre.oval:def:20975

Oval ID:	oval:org.mitre.oval:def:20975
Title:	RHSA-2011:0677: openssl security, bug fix, and enhancement update (Moderate)
Description:	ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:0677-01 CVE-2011-0014	Version:	4
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	openssl
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section openssl-devel is earlier than 0:1.0.0-10.el6 AND openssl-static is earlier than 0:1.0.0-10.el6 AND openssl-perl is earlier than 0:1.0.0-10.el6 AND openssl is earlier than 0:1.0.0-10.el6

Definition Id: oval:org.mitre.oval:def:20976

Oval ID:	oval:org.mitre.oval:def:20976
Title:	RHSA-2012:0324: libxml2 security update (Moderate)
Description:	libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0324-01 CESA-2012:0324 CVE-2012-0841	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6 CentOS Linux 5 CentOS Linux 6	Product(s):	libxml2
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section libxml2-devel is earlier than 0:2.6.26-2.1.15.el5_8.2 AND libxml2-python is earlier than 0:2.6.26-2.1.15.el5_8.2 AND libxml2 is earlier than 0:2.6.26-2.1.15.el5_8.2 AND Operation system section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section libxml2-devel is earlier than 0:2.7.6-4.el6_2.4 AND libxml2-python is earlier than 0:2.7.6-4.el6_2.4 AND libxml2 is earlier than 0:2.7.6-4.el6_2.4 AND libxml2-static is earlier than 0:2.7.6-4.el6_2.4

Definition Id: oval:org.mitre.oval:def:21032

Oval ID:	oval:org.mitre.oval:def:21032
Title:	Multiple OpenSSL vulnerabilities
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2012-2110	Version:	4
Platform(s):	IBM AIX 6.1 IBM AIX 7.1	Product(s):
Definition Synopsis:
IBM AIX 6.1 is installed AND filesets openssl.base less than or equal 0.9.8.1801 AND OpenSSL-fips.base less than or equal 12.9.8.1801

Definition Id: oval:org.mitre.oval:def:21088

Oval ID:	oval:org.mitre.oval:def:21088
Title:	RHSA-2012:0427: libtasn1 security update (Important)
Description:	The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0427-02 CESA-2012:0427 CVE-2012-1569	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	libtasn1
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section libtasn1-tools is earlier than 0:2.3-3.el6_2.1 AND libtasn1 is earlier than 0:2.3-3.el6_2.1 AND libtasn1-devel is earlier than 0:2.3-3.el6_2.1

Definition Id: oval:org.mitre.oval:def:21093

Oval ID:	oval:org.mitre.oval:def:21093
Title:	USN-1236-1 -- linux vulnerabilities
Description:	Multiple kernel flaws have been fixed.
Family:	unix	Class:	patch
Reference(s):	USN-1236-1 CVE-2009-4067 CVE-2011-1573 CVE-2011-2494 CVE-2011-2495 CVE-2011-3188	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	linux
Definition Synopsis:
Ubuntu 8.04 is installed Packages match section linux-image-2.6.24-29-386 DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-generic DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-hppa32 DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-hppa64 DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-itanium DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-lpia DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-lpiacompat DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-mckinley DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-openvz DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-powerpc DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-powerpc-smp DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-powerpc64-smp DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-rt DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-server DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-sparc64 DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-sparc64-smp DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-virtual DPKG is earlier than 0:2.6.24-29.95 AND linux-image-2.6.24-29-xen DPKG is earlier than 0:2.6.24-29.95

Definition Id: oval:org.mitre.oval:def:21098

Oval ID:	oval:org.mitre.oval:def:21098
Title:	RHSA-2012:0350: kernel security and bug fix update (Moderate)
Description:	The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0350-01 CESA-2012:0350 CVE-2011-4077 CVE-2011-4081 CVE-2011-4132 CVE-2011-4347 CVE-2011-4594 CVE-2011-4611 CVE-2011-4622 CVE-2012-0038 CVE-2012-0045 CVE-2012-0207	Version:	133
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	kernel
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section kernel-kdump-devel is earlier than 0:2.6.32-220.7.1.el6 AND kernel-devel is earlier than 0:2.6.32-220.7.1.el6 AND kernel-headers is earlier than 0:2.6.32-220.7.1.el6 AND python-perf is earlier than 0:2.6.32-220.7.1.el6 AND perf is earlier than 0:2.6.32-220.7.1.el6 AND kernel-kdump is earlier than 0:2.6.32-220.7.1.el6 AND kernel-firmware is earlier than 0:2.6.32-220.7.1.el6 AND kernel-debug-devel is earlier than 0:2.6.32-220.7.1.el6 AND kernel-doc is earlier than 0:2.6.32-220.7.1.el6 AND kernel-debug is earlier than 0:2.6.32-220.7.1.el6 AND kernel-bootwrapper is earlier than 0:2.6.32-220.7.1.el6 AND kernel is earlier than 0:2.6.32-220.7.1.el6

Definition Id: oval:org.mitre.oval:def:21179

Oval ID:	oval:org.mitre.oval:def:21179
Title:	RHSA-2012:0480: kernel security, bug fix, and enhancement update (Important)
Description:	Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0480-02 CESA-2012:0480 CVE-2012-1583	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	kernel
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section kernel-PAE is earlier than 0:2.6.18-308.4.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-debug is earlier than 0:2.6.18-308.4.1.el5 AND kernel-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-doc is earlier than 0:2.6.18-308.4.1.el5 AND kernel-xen is earlier than 0:2.6.18-308.4.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-headers is earlier than 0:2.6.18-308.4.1.el5 AND kernel-kdump is earlier than 0:2.6.18-308.4.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-308.4.1.el5

Definition Id: oval:org.mitre.oval:def:21192

Oval ID:	oval:org.mitre.oval:def:21192
Title:	RHSA-2012:0059: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0059-01 CESA-2012:0059 CVE-2011-4108 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619	Version:	55
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	openssl
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section openssl-devel is earlier than 0:1.0.0-20.el6_2.1 AND openssl-static is earlier than 0:1.0.0-20.el6_2.1 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.1 AND openssl is earlier than 0:1.0.0-20.el6_2.1

Definition Id: oval:org.mitre.oval:def:21250

Oval ID:	oval:org.mitre.oval:def:21250
Title:	RHSA-2012:0428: gnutls security update (Important)
Description:	gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0428-02 CESA-2012:0428 CVE-2011-4128 CVE-2012-1569 CVE-2012-1573	Version:	42
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	gnutls
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section gnutls is earlier than 0:1.4.1-7.el5_8.2 AND gnutls-devel is earlier than 0:1.4.1-7.el5_8.2 AND gnutls-utils is earlier than 0:1.4.1-7.el5_8.2

Definition Id: oval:org.mitre.oval:def:21296

Oval ID:	oval:org.mitre.oval:def:21296
Title:	RHSA-2012:0058: glibc security and bug fix update (Moderate)
Description:	The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0058-01 CESA-2012:0058 CVE-2009-5029 CVE-2011-4609	Version:	29
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	glibc
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section glibc-devel is earlier than 0:2.12-1.47.el6_2.5 AND glibc-utils is earlier than 0:2.12-1.47.el6_2.5 AND glibc is earlier than 0:2.12-1.47.el6_2.5 AND nscd is earlier than 0:2.12-1.47.el6_2.5 AND glibc-static is earlier than 0:2.12-1.47.el6_2.5 AND glibc-common is earlier than 0:2.12-1.47.el6_2.5 AND glibc-headers is earlier than 0:2.12-1.47.el6_2.5

Definition Id: oval:org.mitre.oval:def:21353

Oval ID:	oval:org.mitre.oval:def:21353
Title:	RHSA-2012:0397: glibc security update (Moderate)
Description:	Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0397-01 CESA-2012:0397 CVE-2012-0864	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	glibc
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section nscd is earlier than 0:2.5-81.el5_8.1 AND glibc is earlier than 0:2.5-81.el5_8.1 AND glibc-devel is earlier than 0:2.5-81.el5_8.1 AND glibc-common is earlier than 0:2.5-81.el5_8.1 AND glibc-headers is earlier than 0:2.5-81.el5_8.1 AND glibc-utils is earlier than 0:2.5-81.el5_8.1

Definition Id: oval:org.mitre.oval:def:21363

Oval ID:	oval:org.mitre.oval:def:21363
Title:	RHSA-2012:0060: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0060-01 CESA-2012:0060 CVE-2011-4108 CVE-2011-4109 CVE-2011-4576 CVE-2011-4619	Version:	55
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl
Definition Synopsis:
Redhat 5 section The operating system installed on the system is Red Hat Enterprise Linux 5 AND Packages section openssl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1 OR Centos 5 section The operating system installed on the system is CentOS Linux 5.x AND Packages section openssl is earlier than 0:0.9.8e-20.el5_7.1.0.1.centos AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1.0.1.centos AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1.0.1.centos

Definition Id: oval:org.mitre.oval:def:21365

Oval ID:	oval:org.mitre.oval:def:21365
Title:	RHSA-2012:0126: glibc security update (Moderate)
Description:	The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0126-01 CESA-2012:0126 CVE-2009-5029 CVE-2009-5064 CVE-2010-0830 CVE-2011-1089 CVE-2011-4609	Version:	68
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	glibc
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section nscd is earlier than 0:2.5-65.el5_7.3 AND glibc-utils is earlier than 0:2.5-65.el5_7.3 AND glibc-devel is earlier than 0:2.5-65.el5_7.3 AND glibc-common is earlier than 0:2.5-65.el5_7.3 AND glibc is earlier than 0:2.5-65.el5_7.3 AND glibc-headers is earlier than 0:2.5-65.el5_7.3

Definition Id: oval:org.mitre.oval:def:21366

Oval ID:	oval:org.mitre.oval:def:21366
Title:	RHSA-2012:0518: openssl security update (Important)
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0518-02 CESA-2012:0518 CVE-2012-2110	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5 CentOS Linux 5 CentOS Linux 6	Product(s):	openssl openssl097a openssl098e
Definition Synopsis:
Operation system section Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section openssl-devel is earlier than 0:0.9.8e-22.el5_8.3 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.3 AND openssl is earlier than 0:0.9.8e-22.el5_8.3 AND openssl097a is earlier than 0:0.9.7a-11.el5_8.2 OR Redhat 6 and Centos 6 section Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x AND Packages section openssl-devel is earlier than 0:1.0.0-20.el6_2.4 AND openssl-static is earlier than 0:1.0.0-20.el6_2.4 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.4 AND openssl is earlier than 0:1.0.0-20.el6_2.4 OR Centos 6 section The operating system installed on the system is CentOS Linux 6.x AND openssl098e is earlier than 0:0.9.8e-17.el6.centos.2 OR Redhat 6 section The operating system installed on the system is Red Hat Enterprise Linux 6 AND openssl098e is earlier than 0:0.9.8e-17.el6_2.2

Definition Id: oval:org.mitre.oval:def:21370

Oval ID:	oval:org.mitre.oval:def:21370
Title:	RHSA-2012:0107: kernel security and bug fix update (Important)
Description:	The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0107-01 CESA-2012:0107 CVE-2011-3638 CVE-2011-4086 CVE-2011-4127 CVE-2012-0028 CVE-2012-0207	Version:	68
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	kernel
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section kernel-headers is earlier than 0:2.6.18-274.18.1.el5 AND kernel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.18.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-kdump is earlier than 0:2.6.18-274.18.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.18.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.18.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.18.1.el5

Definition Id: oval:org.mitre.oval:def:21459

Oval ID:	oval:org.mitre.oval:def:21459
Title:	RHSA-2012:0393: glibc security and bug fix update (Moderate)
Description:	Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
Family:	unix	Class:	patch
Reference(s):	RHSA-2012:0393-01 CESA-2012:0393 CVE-2012-0864	Version:	4
Platform(s):	Red Hat Enterprise Linux 6 CentOS Linux 6	Product(s):	glibc
Definition Synopsis:
Redhat 6 or Centos 6 release The operating system installed on the system is Red Hat Enterprise Linux 6 AND The operating system installed on the system is CentOS Linux 6.x Packages section glibc-devel is earlier than 0:2.12-1.47.el6_2.9 AND glibc-utils is earlier than 0:2.12-1.47.el6_2.9 AND glibc is earlier than 0:2.12-1.47.el6_2.9 AND nscd is earlier than 0:2.12-1.47.el6_2.9 AND glibc-static is earlier than 0:2.12-1.47.el6_2.9 AND glibc-common is earlier than 0:2.12-1.47.el6_2.9 AND glibc-headers is earlier than 0:2.12-1.47.el6_2.9

Definition Id: oval:org.mitre.oval:def:21725

Oval ID:	oval:org.mitre.oval:def:21725
Title:	RHSA-2011:1797: perl security update (Moderate)
Description:	Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1797-01 CESA-2011:1797 CVE-2010-2761 CVE-2010-4410 CVE-2011-3597	Version:	42
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	perl
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section perl-suidperl is earlier than 4:5.8.8-32.el5_7.6 AND perl is earlier than 4:5.8.8-32.el5_7.6

Definition Id: oval:org.mitre.oval:def:22038

Oval ID:	oval:org.mitre.oval:def:22038
Title:	RHSA-2010:0978: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0978-01 CESA-2010:0978 CVE-2008-7270 CVE-2010-4180	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section openssl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-perl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-devel is earlier than 0:0.9.8e-12.el5_5.7

Definition Id: oval:org.mitre.oval:def:22078

Oval ID:	oval:org.mitre.oval:def:22078
Title:	RHSA-2011:1424: perl security update (Moderate)
Description:	Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1424-01 CVE-2011-2939 CVE-2011-3597	Version:	29
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	perl
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section perl-libs is earlier than 4:5.10.1-119.el6_1.1 AND perl-suidperl is earlier than 4:5.10.1-119.el6_1.1 AND perl-core is earlier than 0:5.10.1-119.el6_1.1 AND perl-ExtUtils-CBuilder is earlier than 1:0.27-119.el6_1.1 AND perl-IO-Compress-Base is earlier than 0:2.020-119.el6_1.1 AND perl-Package-Constants is earlier than 1:0.02-119.el6_1.1 AND perl-CGI is earlier than 0:3.51-119.el6_1.1 AND perl-Log-Message-Simple is earlier than 0:0.04-119.el6_1.1 AND perl-version is earlier than 3:0.77-119.el6_1.1 AND perl-ExtUtils-ParseXS is earlier than 1:2.2003.0-119.el6_1.1 AND perl-Time-HiRes is earlier than 4:1.9721-119.el6_1.1 AND perl-Archive-Extract is earlier than 1:0.38-119.el6_1.1 AND perl-Test-Simple is earlier than 0:0.92-119.el6_1.1 AND perl-Module-Loaded is earlier than 1:0.02-119.el6_1.1 AND perl-Compress-Raw-Zlib is earlier than 0:2.023-119.el6_1.1 AND perl-Pod-Escapes is earlier than 1:1.04-119.el6_1.1 AND perl-CPANPLUS is earlier than 0:0.88-119.el6_1.1 AND perl-parent is earlier than 1:0.221-119.el6_1.1 AND perl-IO-Compress-Zlib is earlier than 0:2.020-119.el6_1.1 AND perl-Module-Pluggable is earlier than 1:3.90-119.el6_1.1 AND perl-Test-Harness is earlier than 0:3.17-119.el6_1.1 AND perl-Module-Load is earlier than 1:0.16-119.el6_1.1 AND perl-Pod-Simple is earlier than 1:3.13-119.el6_1.1 AND perl-Params-Check is earlier than 1:0.26-119.el6_1.1 AND perl-File-Fetch is earlier than 0:0.26-119.el6_1.1 AND perl-IO-Zlib is earlier than 1:1.09-119.el6_1.1 AND perl-Module-CoreList is earlier than 0:2.18-119.el6_1.1 AND perl-Compress-Zlib is earlier than 0:2.020-119.el6_1.1 AND perl is earlier than 4:5.10.1-119.el6_1.1 AND perl-Time-Piece is earlier than 0:1.15-119.el6_1.1 AND perl-Digest-SHA is earlier than 1:5.47-119.el6_1.1 AND perl-Archive-Tar is earlier than 0:1.58-119.el6_1.1 AND perl-Locale-Maketext-Simple is earlier than 1:0.18-119.el6_1.1 AND perl-Module-Load-Conditional is earlier than 0:0.30-119.el6_1.1 AND perl-devel is earlier than 4:5.10.1-119.el6_1.1 AND perl-CPAN is earlier than 0:1.9402-119.el6_1.1 AND perl-ExtUtils-MakeMaker is earlier than 0:6.55-119.el6_1.1 AND perl-Object-Accessor is earlier than 1:0.34-119.el6_1.1 AND perl-IPC-Cmd is earlier than 1:0.56-119.el6_1.1 AND perl-ExtUtils-Embed is earlier than 0:1.28-119.el6_1.1 AND perl-Term-UI is earlier than 0:0.20-119.el6_1.1 AND perl-Module-Build is earlier than 1:0.3500-119.el6_1.1 AND perl-Parse-CPAN-Meta is earlier than 1:1.40-119.el6_1.1 AND perl-Log-Message is earlier than 1:0.02-119.el6_1.1

Definition Id: oval:org.mitre.oval:def:22097

Oval ID:	oval:org.mitre.oval:def:22097
Title:	RHSA-2010:0979: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0979-01 CVE-2010-4180	Version:	4
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	openssl
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages section openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl is earlier than 0:1.0.0-4.el6_0.2

Definition Id: oval:org.mitre.oval:def:22198

Oval ID:	oval:org.mitre.oval:def:22198
Title:	RHSA-2011:1479: kernel security, bug fix, and enhancement update (Important)
Description:	The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1479-01 CESA-2011:1479 CVE-2011-1162 CVE-2011-1898 CVE-2011-2203 CVE-2011-2494 CVE-2011-3363 CVE-2011-4110	Version:	81
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	kernel
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section kernel-headers is earlier than 0:2.6.18-274.12.1.el5 AND kernel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.12.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.12.1.el5

Definition Id: oval:org.mitre.oval:def:22306

Oval ID:	oval:org.mitre.oval:def:22306
Title:	ELSA-2010:0978: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0978-01 CVE-2008-7270 CVE-2010-4180	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x rpm test openssl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-perl is earlier than 0:0.9.8e-12.el5_5.7 AND openssl-devel is earlier than 0:0.9.8e-12.el5_5.7

Definition Id: oval:org.mitre.oval:def:22667

Oval ID:	oval:org.mitre.oval:def:22667
Title:	ELSA-2012:0397: glibc security update (Moderate)
Description:	Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0397-01 CVE-2012-0864	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	glibc
Definition Synopsis:
Oracle Linux 5.x rpm test nscd is earlier than 0:2.5-81.el5_8.1 AND glibc is earlier than 0:2.5-81.el5_8.1 AND glibc-devel is earlier than 0:2.5-81.el5_8.1 AND glibc-common is earlier than 0:2.5-81.el5_8.1 AND glibc-headers is earlier than 0:2.5-81.el5_8.1 AND glibc-utils is earlier than 0:2.5-81.el5_8.1

Definition Id: oval:org.mitre.oval:def:22780

Oval ID:	oval:org.mitre.oval:def:22780
Title:	ELSA-2010:0979: openssl security update (Moderate)
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0979-01 CVE-2010-4180	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x rpm test openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl is earlier than 0:1.0.0-4.el6_0.2

Definition Id: oval:org.mitre.oval:def:22910

Oval ID:	oval:org.mitre.oval:def:22910
Title:	ELSA-2012:0126: glibc security update (Moderate)
Description:	The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0126-01 CVE-2009-5029 CVE-2009-5064 CVE-2010-0830 CVE-2011-1089 CVE-2011-4609	Version:	25
Platform(s):	Oracle Linux 5	Product(s):	glibc
Definition Synopsis:
Oracle Linux 5.x rpm test nscd is earlier than 0:2.5-65.el5_7.3 AND glibc-utils is earlier than 0:2.5-65.el5_7.3 AND glibc-devel is earlier than 0:2.5-65.el5_7.3 AND glibc-common is earlier than 0:2.5-65.el5_7.3 AND glibc is earlier than 0:2.5-65.el5_7.3 AND glibc-headers is earlier than 0:2.5-65.el5_7.3

Definition Id: oval:org.mitre.oval:def:23051

Oval ID:	oval:org.mitre.oval:def:23051
Title:	ELSA-2012:0480: kernel security, bug fix, and enhancement update (Important)
Description:	Double free vulnerability in the xfrm6_tunnel_rcv function in net/ipv6/xfrm6_tunnel.c in the Linux kernel before 2.6.22, when the xfrm6_tunnel module is enabled, allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0480-02 CVE-2012-1583	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	kernel
Definition Synopsis:
Oracle Linux 5.x rpm test kernel-PAE is earlier than 0:2.6.18-308.4.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-debug is earlier than 0:2.6.18-308.4.1.el5 AND kernel-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-doc is earlier than 0:2.6.18-308.4.1.el5 AND kernel-xen is earlier than 0:2.6.18-308.4.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-headers is earlier than 0:2.6.18-308.4.1.el5 AND kernel-kdump is earlier than 0:2.6.18-308.4.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-308.4.1.el5

Definition Id: oval:org.mitre.oval:def:23081

Oval ID:	oval:org.mitre.oval:def:23081
Title:	ELSA-2012:0428: gnutls security update (Important)
Description:	gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0428-02 CVE-2011-4128 CVE-2012-1569 CVE-2012-1573	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x rpm test gnutls is earlier than 0:1.4.1-7.el5_8.2 AND gnutls-devel is earlier than 0:1.4.1-7.el5_8.2 AND gnutls-utils is earlier than 0:1.4.1-7.el5_8.2

Definition Id: oval:org.mitre.oval:def:23087

Oval ID:	oval:org.mitre.oval:def:23087
Title:	DEPRECATED: ELSA-2012:0324: libxml2 security update (Moderate)
Description:	libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0324-01 CVE-2012-0841	Version:	7
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libxml2
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test libxml2-devel is earlier than 0:2.6.26-2.1.15.el5_8.2 AND libxml2-python is earlier than 0:2.6.26-2.1.15.el5_8.2 AND libxml2 is earlier than 0:2.6.26-2.1.15.el5_8.2 OR rpm test Oracle Linux 6.x AND rpm test libxml2-devel is earlier than 0:2.7.6-4.el6_2.4 AND libxml2-python is earlier than 0:2.7.6-4.el6_2.4 AND libxml2 is earlier than 0:2.7.6-4.el6_2.4 AND libxml2-static is earlier than 0:2.7.6-4.el6_2.4

Definition Id: oval:org.mitre.oval:def:23167

Oval ID:	oval:org.mitre.oval:def:23167
Title:	DEPRECATED: ELSA-2012:0451: rpm security update (Important)
Description:	The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0451-03 CVE-2012-0060 CVE-2012-0061 CVE-2012-0815	Version:	18
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	rpm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test rpm is earlier than 0:4.4.2.3-28.el5_8 AND rpm-python is earlier than 0:4.4.2.3-28.el5_8 AND rpm-libs is earlier than 0:4.4.2.3-28.el5_8 AND rpm-build is earlier than 0:4.4.2.3-28.el5_8 AND rpm-apidocs is earlier than 0:4.4.2.3-28.el5_8 AND popt is earlier than 0:1.10.2.3-28.el5_8 AND rpm-devel is earlier than 0:4.4.2.3-28.el5_8 OR rpm test Oracle Linux 6.x AND rpm test rpm-cron is earlier than 0:4.8.0-19.el6_2.1 AND rpm is earlier than 0:4.8.0-19.el6_2.1 AND rpm-libs is earlier than 0:4.8.0-19.el6_2.1 AND rpm-python is earlier than 0:4.8.0-19.el6_2.1 AND rpm-build is earlier than 0:4.8.0-19.el6_2.1 AND rpm-apidocs is earlier than 0:4.8.0-19.el6_2.1 AND rpm-devel is earlier than 0:4.8.0-19.el6_2.1

Definition Id: oval:org.mitre.oval:def:23202

Oval ID:	oval:org.mitre.oval:def:23202
Title:	ELSA-2011:1479: kernel security, bug fix, and enhancement update (Important)
Description:	The user_update function in security/keys/user_defined.c in the Linux kernel 2.6 allows local users to cause a denial of service (NULL pointer dereference and kernel oops) via vectors related to a user-defined key and "updating a negative key into a fully instantiated key."
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1479-01 CVE-2011-1162 CVE-2011-1898 CVE-2011-2203 CVE-2011-2494 CVE-2011-3363 CVE-2011-4110	Version:	29
Platform(s):	Oracle Linux 5	Product(s):	kernel
Definition Synopsis:
Oracle Linux 5.x rpm test kernel-headers is earlier than 0:2.6.18-274.12.1.el5 AND kernel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.12.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.12.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.12.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-274.12.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.12.1.el5

Definition Id: oval:org.mitre.oval:def:23231

Oval ID:	oval:org.mitre.oval:def:23231
Title:	ELSA-2011:1797: perl security update (Moderate)
Description:	Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1797-01 CVE-2010-2761 CVE-2010-4410 CVE-2011-3597	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	perl
Definition Synopsis:
Oracle Linux 5.x rpm test perl-suidperl is earlier than 4:5.8.8-32.el5_7.6 AND perl is earlier than 4:5.8.8-32.el5_7.6

Definition Id: oval:org.mitre.oval:def:23244

Oval ID:	oval:org.mitre.oval:def:23244
Title:	ELSA-2012:0107: kernel security and bug fix update (Important)
Description:	The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0107-01 CVE-2011-3638 CVE-2011-4086 CVE-2011-4127 CVE-2012-0028 CVE-2012-0207	Version:	25
Platform(s):	Oracle Linux 5	Product(s):	kernel
Definition Synopsis:
Oracle Linux 5.x rpm test kernel-headers is earlier than 0:2.6.18-274.18.1.el5 AND kernel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.18.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-kdump is earlier than 0:2.6.18-274.18.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.18.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.18.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-kdump-devel is earlier than 0:2.6.18-274.18.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.18.1.el5

Definition Id: oval:org.mitre.oval:def:23304

Oval ID:	oval:org.mitre.oval:def:23304
Title:	DEPRECATED: ELSA-2012:0518: openssl security update (Important)
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0518-02 CVE-2012-2110	Version:	7
Platform(s):	Oracle Linux 6 Oracle Linux 5	Product(s):	openssl openssl097a openssl098e
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test openssl-devel is earlier than 0:0.9.8e-22.el5_8.3 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.3 AND openssl is earlier than 0:0.9.8e-22.el5_8.3 AND openssl097a is earlier than 0:0.9.7a-11.el5_8.2 OR rpm test Oracle Linux 6.x AND rpm test openssl-devel is earlier than 0:1.0.0-20.el6_2.4 AND openssl-static is earlier than 0:1.0.0-20.el6_2.4 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.4 AND openssl is earlier than 0:1.0.0-20.el6_2.4 AND openssl098e is earlier than 0:0.9.8e-17.el6_2.2

Definition Id: oval:org.mitre.oval:def:23329

Oval ID:	oval:org.mitre.oval:def:23329
Title:	ELSA-2012:0429: gnutls security update (Important)
Description:	gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) via a crafted record, as demonstrated by a crafted GenericBlockCipher structure.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0429-02 CVE-2011-4128 CVE-2012-1573	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 6.x rpm test gnutls is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-devel is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-utils is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-guile is earlier than 0:2.8.5-4.el6_2.2

Definition Id: oval:org.mitre.oval:def:23401

Oval ID:	oval:org.mitre.oval:def:23401
Title:	ELSA-2012:0060: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0060-01 CVE-2011-4108 CVE-2011-4109 CVE-2011-4576 CVE-2011-4619	Version:	21
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x rpm test openssl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1

Definition Id: oval:org.mitre.oval:def:23416

Oval ID:	oval:org.mitre.oval:def:23416
Title:	ELSA-2011:0677: openssl security, bug fix, and enhancement update (Moderate)
Description:	ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:0677-01 CVE-2011-0014	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x rpm test openssl-devel is earlier than 0:1.0.0-10.el6 AND openssl-static is earlier than 0:1.0.0-10.el6 AND openssl-perl is earlier than 0:1.0.0-10.el6 AND openssl is earlier than 0:1.0.0-10.el6

Definition Id: oval:org.mitre.oval:def:23704

Oval ID:	oval:org.mitre.oval:def:23704
Title:	ELSA-2012:0518: openssl security update (Important)
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0518-02 CVE-2012-2110	Version:	6
Platform(s):	Oracle Linux 6 Oracle Linux 5	Product(s):	openssl openssl097a openssl098e
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test openssl-devel is earlier than 0:0.9.8e-22.el5_8.3 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.3 AND openssl is earlier than 0:0.9.8e-22.el5_8.3 AND openssl097a is earlier than 0:0.9.7a-11.el5_8.2 OR rpm test Oracle Linux 6.x AND rpm test openssl-devel is earlier than 0:1.0.0-20.el6_2.4 AND openssl-static is earlier than 0:1.0.0-20.el6_2.4 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.4 AND openssl is earlier than 0:1.0.0-20.el6_2.4 AND openssl098e is earlier than 0:0.9.8e-17.el6_2.2

Definition Id: oval:org.mitre.oval:def:23710

Oval ID:	oval:org.mitre.oval:def:23710
Title:	ELSA-2012:0350: kernel security and bug fix update (Moderate)
Description:	The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0350-01 CVE-2011-4077 CVE-2011-4081 CVE-2011-4132 CVE-2011-4347 CVE-2011-4594 CVE-2011-4611 CVE-2011-4622 CVE-2012-0038 CVE-2012-0045 CVE-2012-0207	Version:	45
Platform(s):	Oracle Linux 6	Product(s):	kernel
Definition Synopsis:
Oracle Linux 6.x rpm test kernel-kdump-devel is earlier than 0:2.6.32-220.7.1.el6 AND kernel-devel is earlier than 0:2.6.32-220.7.1.el6 AND kernel-headers is earlier than 0:2.6.32-220.7.1.el6 AND python-perf is earlier than 0:2.6.32-220.7.1.el6 AND perf is earlier than 0:2.6.32-220.7.1.el6 AND kernel-kdump is earlier than 0:2.6.32-220.7.1.el6 AND kernel-firmware is earlier than 0:2.6.32-220.7.1.el6 AND kernel-debug-devel is earlier than 0:2.6.32-220.7.1.el6 AND kernel-doc is earlier than 0:2.6.32-220.7.1.el6 AND kernel-debug is earlier than 0:2.6.32-220.7.1.el6 AND kernel-bootwrapper is earlier than 0:2.6.32-220.7.1.el6 AND kernel is earlier than 0:2.6.32-220.7.1.el6

Definition Id: oval:org.mitre.oval:def:23733

Oval ID:	oval:org.mitre.oval:def:23733
Title:	ELSA-2012:0324: libxml2 security update (Moderate)
Description:	libxml2 before 2.8.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted XML data.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0324-01 CVE-2012-0841	Version:	6
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libxml2
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test libxml2-devel is earlier than 0:2.6.26-2.1.15.el5_8.2 AND libxml2-python is earlier than 0:2.6.26-2.1.15.el5_8.2 AND libxml2 is earlier than 0:2.6.26-2.1.15.el5_8.2 OR rpm test Oracle Linux 6.x AND rpm test libxml2-devel is earlier than 0:2.7.6-4.el6_2.4 AND libxml2-python is earlier than 0:2.7.6-4.el6_2.4 AND libxml2 is earlier than 0:2.7.6-4.el6_2.4 AND libxml2-static is earlier than 0:2.7.6-4.el6_2.4

Definition Id: oval:org.mitre.oval:def:23758

Oval ID:	oval:org.mitre.oval:def:23758
Title:	ELSA-2012:0451: rpm security update (Important)
Description:	The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package header, which is not properly handled in a numeric range comparison.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0451-03 CVE-2012-0060 CVE-2012-0061 CVE-2012-0815	Version:	17
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	rpm
Definition Synopsis:
rpm test Oracle Linux 5.x AND rpm test rpm is earlier than 0:4.4.2.3-28.el5_8 AND rpm-python is earlier than 0:4.4.2.3-28.el5_8 AND rpm-libs is earlier than 0:4.4.2.3-28.el5_8 AND rpm-build is earlier than 0:4.4.2.3-28.el5_8 AND rpm-apidocs is earlier than 0:4.4.2.3-28.el5_8 AND popt is earlier than 0:1.10.2.3-28.el5_8 AND rpm-devel is earlier than 0:4.4.2.3-28.el5_8 OR rpm test Oracle Linux 6.x AND rpm test rpm-cron is earlier than 0:4.8.0-19.el6_2.1 AND rpm is earlier than 0:4.8.0-19.el6_2.1 AND rpm-libs is earlier than 0:4.8.0-19.el6_2.1 AND rpm-python is earlier than 0:4.8.0-19.el6_2.1 AND rpm-build is earlier than 0:4.8.0-19.el6_2.1 AND rpm-apidocs is earlier than 0:4.8.0-19.el6_2.1 AND rpm-devel is earlier than 0:4.8.0-19.el6_2.1

Definition Id: oval:org.mitre.oval:def:23778

Oval ID:	oval:org.mitre.oval:def:23778
Title:	ELSA-2011:1424: perl security update (Moderate)
Description:	Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1424-01 CVE-2011-2939 CVE-2011-3597	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	perl
Definition Synopsis:
Oracle Linux 6.x rpm test perl-libs is earlier than 4:5.10.1-119.el6_1.1 AND perl-suidperl is earlier than 4:5.10.1-119.el6_1.1 AND perl-core is earlier than 0:5.10.1-119.el6_1.1 AND perl-ExtUtils-CBuilder is earlier than 1:0.27-119.el6_1.1 AND perl-IO-Compress-Base is earlier than 0:2.020-119.el6_1.1 AND perl-Package-Constants is earlier than 1:0.02-119.el6_1.1 AND perl-CGI is earlier than 0:3.51-119.el6_1.1 AND perl-Log-Message-Simple is earlier than 0:0.04-119.el6_1.1 AND perl-version is earlier than 3:0.77-119.el6_1.1 AND perl-ExtUtils-ParseXS is earlier than 1:2.2003.0-119.el6_1.1 AND perl-Time-HiRes is earlier than 4:1.9721-119.el6_1.1 AND perl-Archive-Extract is earlier than 1:0.38-119.el6_1.1 AND perl-Test-Simple is earlier than 0:0.92-119.el6_1.1 AND perl-Module-Loaded is earlier than 1:0.02-119.el6_1.1 AND perl-Compress-Raw-Zlib is earlier than 0:2.023-119.el6_1.1 AND perl-Pod-Escapes is earlier than 1:1.04-119.el6_1.1 AND perl-CPANPLUS is earlier than 0:0.88-119.el6_1.1 AND perl-parent is earlier than 1:0.221-119.el6_1.1 AND perl-IO-Compress-Zlib is earlier than 0:2.020-119.el6_1.1 AND perl-Module-Pluggable is earlier than 1:3.90-119.el6_1.1 AND perl-Test-Harness is earlier than 0:3.17-119.el6_1.1 AND perl-Module-Load is earlier than 1:0.16-119.el6_1.1 AND perl-Pod-Simple is earlier than 1:3.13-119.el6_1.1 AND perl-Params-Check is earlier than 1:0.26-119.el6_1.1 AND perl-File-Fetch is earlier than 0:0.26-119.el6_1.1 AND perl-IO-Zlib is earlier than 1:1.09-119.el6_1.1 AND perl-Module-CoreList is earlier than 0:2.18-119.el6_1.1 AND perl-Compress-Zlib is earlier than 0:2.020-119.el6_1.1 AND perl is earlier than 4:5.10.1-119.el6_1.1 AND perl-Time-Piece is earlier than 0:1.15-119.el6_1.1 AND perl-Digest-SHA is earlier than 1:5.47-119.el6_1.1 AND perl-Archive-Tar is earlier than 0:1.58-119.el6_1.1 AND perl-Locale-Maketext-Simple is earlier than 1:0.18-119.el6_1.1 AND perl-Module-Load-Conditional is earlier than 0:0.30-119.el6_1.1 AND perl-devel is earlier than 4:5.10.1-119.el6_1.1 AND perl-CPAN is earlier than 0:1.9402-119.el6_1.1 AND perl-ExtUtils-MakeMaker is earlier than 0:6.55-119.el6_1.1 AND perl-Object-Accessor is earlier than 1:0.34-119.el6_1.1 AND perl-IPC-Cmd is earlier than 1:0.56-119.el6_1.1 AND perl-ExtUtils-Embed is earlier than 0:1.28-119.el6_1.1 AND perl-Term-UI is earlier than 0:0.20-119.el6_1.1 AND perl-Module-Build is earlier than 1:0.3500-119.el6_1.1 AND perl-Parse-CPAN-Meta is earlier than 1:1.40-119.el6_1.1 AND perl-Log-Message is earlier than 1:0.02-119.el6_1.1

Definition Id: oval:org.mitre.oval:def:23804

Oval ID:	oval:org.mitre.oval:def:23804
Title:	ELSA-2012:0427: libtasn1 security update (Important)
Description:	The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle certain large length values, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly have unspecified other impact via a crafted ASN.1 structure.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0427-02 CVE-2012-1569	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	libtasn1
Definition Synopsis:
Oracle Linux 6.x rpm test libtasn1-tools is earlier than 0:2.3-3.el6_2.1 AND libtasn1 is earlier than 0:2.3-3.el6_2.1 AND libtasn1-devel is earlier than 0:2.3-3.el6_2.1

Definition Id: oval:org.mitre.oval:def:23809

Oval ID:	oval:org.mitre.oval:def:23809
Title:	ELSA-2012:0058: glibc security and bug fix update (Moderate)
Description:	The svc_run function in the RPC implementation in glibc before 2.15 allows remote attackers to cause a denial of service (CPU consumption) via a large number of RPC connections.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0058-01 CVE-2009-5029 CVE-2011-4609	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	glibc
Definition Synopsis:
Oracle Linux 6.x rpm test glibc-devel is earlier than 0:2.12-1.47.el6_2.5 AND glibc-utils is earlier than 0:2.12-1.47.el6_2.5 AND glibc is earlier than 0:2.12-1.47.el6_2.5 AND nscd is earlier than 0:2.12-1.47.el6_2.5 AND glibc-static is earlier than 0:2.12-1.47.el6_2.5 AND glibc-common is earlier than 0:2.12-1.47.el6_2.5 AND glibc-headers is earlier than 0:2.12-1.47.el6_2.5

Definition Id: oval:org.mitre.oval:def:23853

Oval ID:	oval:org.mitre.oval:def:23853
Title:	ELSA-2012:0393: glibc security and bug fix update (Moderate)
Description:	Integer overflow in the vfprintf function in stdio-common/vfprintf.c in glibc 2.14 and other versions allows context-dependent attackers to bypass the FORTIFY_SOURCE protection mechanism, conduct format string attacks, and write to arbitrary memory via a large number of arguments.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0393-01 CVE-2012-0864	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	glibc
Definition Synopsis:
Oracle Linux 6.x rpm test glibc-devel is earlier than 0:2.12-1.47.el6_2.9 AND glibc-utils is earlier than 0:2.12-1.47.el6_2.9 AND glibc is earlier than 0:2.12-1.47.el6_2.9 AND nscd is earlier than 0:2.12-1.47.el6_2.9 AND glibc-static is earlier than 0:2.12-1.47.el6_2.9 AND glibc-common is earlier than 0:2.12-1.47.el6_2.9 AND glibc-headers is earlier than 0:2.12-1.47.el6_2.9

Definition Id: oval:org.mitre.oval:def:23859

Oval ID:	oval:org.mitre.oval:def:23859
Title:	ELSA-2012:0059: openssl security update (Moderate)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2012:0059-01 CVE-2011-4108 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619	Version:	21
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x rpm test openssl-devel is earlier than 0:1.0.0-20.el6_2.1 AND openssl-static is earlier than 0:1.0.0-20.el6_2.1 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.1 AND openssl is earlier than 0:1.0.0-20.el6_2.1

Definition Id: oval:org.mitre.oval:def:24640

Oval ID:	oval:org.mitre.oval:def:24640
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer
Description:	The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4576	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24643

Oval ID:	oval:org.mitre.oval:def:24643
Title:	Vulnerability in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c, allows remote attackers to cause a denial of service (crash)
Description:	ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka "OCSP stapling vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-0014	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.8h before 0.9.8r AND Check if the version of OpenSSL 1.0.0 before 1.0.0d AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8h before 0.9.8r (32_bit) AND Check if the version of OpenSSL 1.0.0 before 1.0.0d (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8h before 0.9.8r ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8h before 0.9.8r ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8h before 0.9.8r under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0d ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0d ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0d under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24730

Oval ID:	oval:org.mitre.oval:def:24730
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, allows remote attackers to cause a denial of service (assertion failure)
Description:	OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4577	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24750

Oval ID:	oval:org.mitre.oval:def:24750
Title:	OpenSSL vulnerability in 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a, allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact
Description:	The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-2110	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0i AND Check if the version of OpenSSL 1.0.1 before 1.0.1a AND Check if the version of OpenSSL 0.9.1c before 0.9.8v AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0i (32_bit) AND Check if the version of OpenSSL 1.0.1 before 1.0.1a (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8v (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0i ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0i ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0i under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1a ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1a ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.1 before 1.0.1a under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8v ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8v ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8v under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24765

Oval ID:	oval:org.mitre.oval:def:24765
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, allows remote attackers to cause a denial of service (CPU consumption)
Description:	The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4619	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24936

Oval ID:	oval:org.mitre.oval:def:24936
Title:	Vulnerability in OpenSSL before 0.9.8s and 1.x before 1.0.0f, performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext
Description:	The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4108	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0 before 1.0.0f AND Check if the version of OpenSSL 0.9.1c before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0 before 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.1c before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0f under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24969

Oval ID:	oval:org.mitre.oval:def:24969
Title:	Vulnerability in OpenSSL 0.9.8q, and 1.0.x before 1.0.0c, does not properly prevent modification of the ciphersuite in the session cache
Description:	OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4180	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.1c before 0.9.8r AND Check if the version of OpenSSL 1.0.0 before 1.0.0c AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.1c before 0.9.8r (32_bit) AND Check if the version of OpenSSL 1.0.0 before 1.0.0c (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8r under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:24989

Oval ID:	oval:org.mitre.oval:def:24989
Title:	OpenSSL vulnerability in 0.9.8s and 1.0.0f, allows remote attackers to cause a denial of service (crash)
Description:	OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2012-0050	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 1.0.0f AND Check if the version of OpenSSL 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 1.0.0f (32_bit) AND Check if the version of OpenSSL 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 1.0.0f AND Check if the version of ssleay32.dll 1.0.0f (32_bit) AND Check if the version of ssleay32.dll 1.0.0f under System Root AND Check if the version of ssleay32.dll 0.9.8s AND Check if the version of ssleay32.dll 0.9.8s (32_bit) AND Check if the version of ssleay32.dll 0.9.8s under System Root

Definition Id: oval:org.mitre.oval:def:24993

Oval ID:	oval:org.mitre.oval:def:24993
Title:	Vulnerability in OpenSSL before 1.0.0c, does not properly validate the public parameters in the J-PAKE protocol
Description:	OpenSSL before 1.0.0c, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-4252	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.3 before 0.9.8r AND Check if the version of OpenSSL 1.0.0 before 1.0.0c AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.3 before 0.9.8r (32_bit) AND Check if the version of OpenSSL 1.0.0 before 1.0.0c (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.3 before 0.9.8r ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.3 before 0.9.8r ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.3 before 0.9.8r under Sytem32 and SysWOW64 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c ProgramFilesDir x86 AND Check if the version of ssleay32.dll 1.0.0 before 1.0.0c under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25059

Oval ID:	oval:org.mitre.oval:def:25059
Title:	Vulnerability in OpenSSL 0.9.8 before 0.9.8s, allows remote attackers to have an unspecified impact by triggering failure of a policy check
Description:	Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-4109	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check if the version of OpenSSL 0.9.8 before 0.9.8s AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check if the version of OpenSSL 0.9.8 before 0.9.8s (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8s ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8s ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.8 before 0.9.8s under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:25193

Oval ID:	oval:org.mitre.oval:def:25193
Title:	SUSE-SU-2013:1165-1 -- Security update for libcurl4
Description:	This update of curl fixes several security issues: * libcurl URL decode buffer boundary flaw (bnc#824517 / CVE-2013-2174) * cookie domain tailmatch (bnc#814655 / CVE-2013-1944) * curl sets SSL_OP_ALL (bnc#742306 / CVE-2011-3389) * When SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier (CVE-2010-4180)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1165-1 CVE-2013-2174 CVE-2013-1944 CVE-2011-3389 CVE-2010-4180	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 10	Product(s):	libcurl4
Definition Synopsis:
SUSE Linux Enterprise Desktop 10 is installed Packages match section libcurl4-32bit RPM is earlier than 0:7.19.0-11.6.1 AND libcurl4 RPM is earlier than 0:7.19.0-11.6.1

Definition Id: oval:org.mitre.oval:def:25222

Oval ID:	oval:org.mitre.oval:def:25222
Title:	SUSE-SU-2013:1287-1 -- Security update for glibc
Description:	This collective update for the GNU C library (glibc) provides the following fixes and enhancements: Security issues fixed: - Fix stack overflow in getaddrinfo with many results. (bnc#813121, CVE-2013-1914) - Fixed another stack overflow in getaddrinfo with many results (bnc#828637) - Fix buffer overflow in glob. (bnc#691365) (CVE-2010-4756) - Fix array overflow in floating point parser [bnc#775690] (CVE-2012-3480) - Fix strtod integer/buffer overflows [bnc#775690] (CVE-2012-3480) - Make addmntent return errors also for cached streams. [bnc #676178, CVE-2011-1089] - Fix overflows in vfprintf. [bnc #770891, CVE 2012-3406] - Add vfprintf-nargs.diff for possible format string overflow. [bnc #747768, CVE-2012-0864] - Check values from file header in __tzfile_read. [bnc #735850, CVE-2009-5029] Also several bugs were fixed: - Fix locking in _IO_cleanup. (bnc#796982) - Fix memory leak in execve. (bnc#805899) - Fix nscd timestamps in logging (bnc#783196) - Fix perl script error message (bnc#774467) - Fall back to localhost if no nameserver defined (bnc#818630) - Fix incomplete results from nscd. [bnc #753756] - Fix a deadlock in dlsym in case the symbol isn't found, for multithreaded programs. [bnc #760216] - Fix problem with TLS and dlopen. [#732110] - Backported regex fix for skipping of valid EUC-JP matches [bnc#743689] - Fixed false regex match on incomplete chars in EUC-JP [bnc#743689] - Add glibc-pmap-timeout.diff in order to fix useless connection attempts to NFS servers. [bnc #661460]
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1287-1 CVE-2013-1914 CVE-2010-4756 CVE-2012-3480 CVE-2011-1089 CVE-2012-0864 CVE-2009-5029	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	glibc
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section glibc RPM is earlier than 0:2.4-31.77.102.1 AND glibc-devel RPM is earlier than 0:2.4-31.77.102.1 AND glibc-html RPM is earlier than 0:2.4-31.77.102.1 AND glibc-i18ndata RPM is earlier than 0:2.4-31.77.102.1 AND glibc-info RPM is earlier than 0:2.4-31.77.102.1 AND glibc-locale RPM is earlier than 0:2.4-31.77.102.1 AND glibc-profile RPM is earlier than 0:2.4-31.77.102.1 AND nscd RPM is earlier than 0:2.4-31.77.102.1 AND glibc-32bit RPM is earlier than 0:2.4-31.77.102.1 AND glibc-devel-32bit RPM is earlier than 0:2.4-31.77.102.1 AND glibc-locale-32bit RPM is earlier than 0:2.4-31.77.102.1 AND glibc-profile-32bit RPM is earlier than 0:2.4-31.77.102.1

Definition Id: oval:org.mitre.oval:def:25330

Oval ID:	oval:org.mitre.oval:def:25330
Title:	SUSE-SU-2014:0320-1 -- Security update for gnutls
Description:	The GnuTLS library received a critical security fix and other updates.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0320-1 CVE-2014-0092 CVE-2009-5138 CVE-2013-2116 CVE-2013-1619 CVE-2013-0169 CVE-2012-1569 CVE-2012-1573 CVE-2012-0390 CVE-2011-4108	Version:	3
Platform(s):	SUSE Linux Enterprise Server 10	Product(s):	gnutls
Definition Synopsis:
SUSE Linux Enterprise Server 10 is installed Packages match section gnutls RPM is earlier than 0:1.2.10-13.38.1 AND gnutls-devel RPM is earlier than 0:1.2.10-13.38.1 AND gnutls-32bit RPM is earlier than 0:1.2.10-13.38.1 AND gnutls-devel-32bit RPM is earlier than 0:1.2.10-13.38.1

Definition Id: oval:org.mitre.oval:def:25868

Oval ID:	oval:org.mitre.oval:def:25868
Title:	SUSE-SU-2013:1251-1 -- Security update for glibc
Description:	This collective update for the GNU C library (glibc) provides the following fixes and enhancements: Security issues fixed: * Fix stack overflow in getaddrinfo with many results. (bnc#813121, CVE-2013-1914) * Fix a different stack overflow in getaddrinfo with many results. (bnc#828637) * Fix array overflow in floating point parser [bnc#775690] (CVE-2012-3480) * Fix strtod integer/buffer overflows [bnc#775690] (CVE-2012-3480) * Add patches for fix overflows in vfprintf. [bnc #770891, CVE-2012-3405, CVE-2012-3406] * Fix buffer overflow in glob. (bnc#691365) (CVE-2010-4756) * Flush stream in addmntent, to catch errors like reached file size limits. [bnc #676178, CVE-2011-1089] Bugs fixed: * Fix locking in _IO_cleanup. (bnc#796982) * Fix resolver when first query fails, but seconds succeeds. [bnc #767266]
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1251-1 CVE-2013-1914 CVE-2012-3480 CVE-2012-3405 CVE-2012-3406 CVE-2010-4756 CVE-2011-1089	Version:	3
Platform(s):	SUSE Linux Enterprise Server 11	Product(s):	glibc
Definition Synopsis:
SUSE Linux Enterprise Server 11.x is installed Packages match section glibc RPM is earlier than 0:2.11.1-0.50.1 AND glibc-devel RPM is earlier than 0:2.11.1-0.50.1 AND glibc-html RPM is earlier than 0:2.11.1-0.50.1 AND glibc-i18ndata RPM is earlier than 0:2.11.1-0.50.1 AND glibc-info RPM is earlier than 0:2.11.1-0.50.1 AND glibc-locale RPM is earlier than 0:2.11.1-0.50.1 AND glibc-profile RPM is earlier than 0:2.11.1-0.50.1 AND nscd RPM is earlier than 0:2.11.1-0.50.1 AND glibc-32bit RPM is earlier than 0:2.11.1-0.50.1 AND glibc-devel-32bit RPM is earlier than 0:2.11.1-0.50.1 AND glibc-locale-32bit RPM is earlier than 0:2.11.1-0.50.1 AND glibc-profile-32bit RPM is earlier than 0:2.11.1-0.50.1

Definition Id: oval:org.mitre.oval:def:26787

Oval ID:	oval:org.mitre.oval:def:26787
Title:	RHSA-2011:1526 -- glibc security, bug fix, and enhancement update (Low)
Description:	The glibc packages contain the standard C libraries used by multiple programs on the system. These packages contain the standard C and the standard math libraries. Without these two libraries, a Linux system cannot function properly. A flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064) It was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089) Red Hat would like to thank Dan Rosenberg for reporting the CVE-2011-1089 issue. This update also fixes several bugs and adds various enhancements. Documentation for these bug fixes and enhancements will be available shortly from the Technical Notes document, linked to in the References section. Users are advised to upgrade to these updated glibc packages, which contain backported patches to resolve these issues and add these enhancements.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1526 CVE-2009-5064 CVE-2011-1089	Version:	3
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	glibc
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section glibc is earlier than 0:2.12-1.47.el6 AND glibc-common is earlier than 0:2.12-1.47.el6 AND glibc-debuginfo is earlier than 0:2.12-1.47.el6 AND glibc-debuginfo-common is earlier than 0:2.12-1.47.el6 AND glibc-devel is earlier than 0:2.12-1.47.el6 AND glibc-headers is earlier than 0:2.12-1.47.el6 AND glibc-static is earlier than 0:2.12-1.47.el6 AND glibc-utils is earlier than 0:2.12-1.47.el6 AND nscd is earlier than 0:2.12-1.47.el6

Definition Id: oval:org.mitre.oval:def:27073

Oval ID:	oval:org.mitre.oval:def:27073
Title:	DEPRECATED: ELSA-2012-0059 -- openssl security update (moderate)
Description:	[1.0.0-20.1] - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes (#771770) - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775) - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778) - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0059 CVE-2011-4577 CVE-2011-4108 CVE-2011-4576 CVE-2011-4619	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-20.el6_2.1 AND openssl-devel is earlier than 0:1.0.0-20.el6_2.1 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.1 AND openssl-static is earlier than 0:1.0.0-20.el6_2.1

Definition Id: oval:org.mitre.oval:def:27217

Oval ID:	oval:org.mitre.oval:def:27217
Title:	RHSA-2011:1530 -- Red Hat Enterprise Linux 6 kernel security, bug fix and enhancement update (Moderate)
Description:	The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issues: * The proc file system could allow a local, unprivileged user to obtain sensitive information or possibly cause integrity issues. (CVE-2011-1020, Moderate) * Non-member VLAN (virtual LAN) packet handling for interfaces in promiscuous mode and also using the be2net driver could allow an attacker on the local network to cause a denial of service. (CVE-2011-3347, Moderate) * A flaw was found in the Linux kernel in the way splitting two extents in ext4_ext_convert_to_initialized() worked. A local, unprivileged user with access to mount and unmount ext4 file systems could use this flaw to cause a denial of service. (CVE-2011-3638, Moderate) * A NULL pointer dereference flaw was found in the way the Linux kernel's key management facility handled user-defined key types. A local, unprivileged user could use the keyctl utility to cause a denial of service. (CVE-2011-4110, Moderate) Red Hat would like to thank Kees Cook for reporting CVE-2011-1020; Somnath Kotur for reporting CVE-2011-3347; and Zheng Liu for reporting CVE-2011-3638. This update also fixes several hundred bugs and adds enhancements. Refer to the Red Hat Enterprise Linux 6.2 Release Notes for information on the most significant of these changes, and the Technical Notes for further information, both linked to in the References. All Red Hat Enterprise Linux 6 users are advised to install these updated packages, which correct these issues, and fix the bugs and add the enhancements noted in the Red Hat Enterprise Linux 6.2 Release Notes and Technical Notes. The system must be rebooted for this update to take effect.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1530 CVE-2011-1020 CVE-2011-3347 CVE-2011-3638 CVE-2011-4110	Version:	3
Platform(s):	Red Hat Enterprise Linux 6	Product(s):	kernel
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 6 Packages match section kernel is earlier than 0:2.6.32-220.el6 AND kernel-debug is earlier than 0:2.6.32-220.el6 AND kernel-debug-debuginfo is earlier than 0:2.6.32-220.el6 AND kernel-debug-devel is earlier than 0:2.6.32-220.el6 AND kernel-debuginfo is earlier than 0:2.6.32-220.el6 AND kernel-debuginfo-common-i686 is earlier than 0:2.6.32-220.el6 AND kernel-devel is earlier than 0:2.6.32-220.el6 AND kernel-doc is earlier than 0:2.6.32-220.el6 AND kernel-firmware is earlier than 0:2.6.32-220.el6 AND kernel-headers is earlier than 0:2.6.32-220.el6 AND perf is earlier than 0:2.6.32-220.el6 AND perf-debuginfo is earlier than 0:2.6.32-220.el6 AND python-perf is earlier than 0:2.6.32-220.el6 AND kernel-debuginfo-common-x86_64 is earlier than 0:2.6.32-220.el6

Definition Id: oval:org.mitre.oval:def:27625

Oval ID:	oval:org.mitre.oval:def:27625
Title:	DEPRECATED: ELSA-2012-0393 -- glibc security and bug fix update (moderate)
Description:	[2.12-1.47.el6_2.9] - Always use another area after a failed allocation in the main arena (#795328) - Remove sse3 memcpy (#695812) changes (#799259) [2.12-1.47.el6_2.8] - Avoid nargs integer overflow which could be used to bypass FORTIFY_SOURCE (#794815) [2.12-1.47.el6_2.7] - Fix locking on malloc family retry paths (#795328) [2.12-1.47.el6_2.6] - Fix cycle detection in dynamic loader (#783999)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0393 CVE-2012-0864	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	glibc
Definition Synopsis:
Oracle Linux 6.x Packages match section glibc is earlier than 0:2.12-1.47.el6_2.9 AND glibc-common is earlier than 0:2.12-1.47.el6_2.9 AND glibc-devel is earlier than 0:2.12-1.47.el6_2.9 AND glibc-headers is earlier than 0:2.12-1.47.el6_2.9 AND glibc-static is earlier than 0:2.12-1.47.el6_2.9 AND glibc-utils is earlier than 0:2.12-1.47.el6_2.9 AND nscd is earlier than 0:2.12-1.47.el6_2.9

Definition Id: oval:org.mitre.oval:def:27663

Oval ID:	oval:org.mitre.oval:def:27663
Title:	DEPRECATED: ELSA-2012-0427 -- libtasn1 security update (important)
Description:	[2.3-3.1] - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0427 CVE-2012-1569	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	libtasn1
Definition Synopsis:
Oracle Linux 6.x Packages match section libtasn1 is earlier than 0:2.3-3.el6_2.1 AND libtasn1-devel is earlier than 0:2.3-3.el6_2.1 AND libtasn1-tools is earlier than 0:2.3-3.el6_2.1

Definition Id: oval:org.mitre.oval:def:27726

Oval ID:	oval:org.mitre.oval:def:27726
Title:	DEPRECATED: ELSA-2012-0060 -- openssl security update (moderate)
Description:	[0.9.8e-20.1] - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes (#771770) - fix for CVE-2011-4109 - double free in policy checks (#771771) - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775) - fix for CVE-2011-4619 - SGC restart DoS attack (#771780)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0060 CVE-2011-4108 CVE-2011-4109 CVE-2011-4576 CVE-2011-4619	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-devel is earlier than 0:0.9.8e-20.el5_7.1 AND openssl-perl is earlier than 0:0.9.8e-20.el5_7.1

Definition Id: oval:org.mitre.oval:def:27741

Oval ID:	oval:org.mitre.oval:def:27741
Title:	DEPRECATED: ELSA-2011-1479 -- kernel security, bug fix, and enhancement update (important)
Description:	kernel [2.6.18-274.12.1.0.1.el5] - fix ia64 build error due to add-support-above-32-vcpus.patch(Zhenzhong Duan) - [x86] use dynamic vcpu_info remap to support more than 32 vcpus (Zhenzhong Duan) - [scsi] add additional scsi medium error handling (John Sobecki) [orabug 12904887] - [x86] Fix lvt0 reset when hvm boot up with noapic param - [scsi] remove printk's when doing I/O to a dead device (John Sobecki, Chris Mason) [orabug 12342275] - [char] ipmi: Fix IPMI errors due to timing problems (Joe Jin) [orabug 12561346] - [scsi] Fix race when removing SCSI devices (Joe Jin) [orabug 12404566] - bonding: reread information about speed and duplex when interface goes up (John Haxby) [orabug 11890822] - [fs] nfs: Fix __put_nfs_open_context() NULL pointer panic (Joe Jin) [orabug 12687646] - [scsi] fix scsi hotplug and rescan race [orabug 10260172] - fix filp_close() race (Joe Jin) [orabug 10335998] - make xenkbd.abs_pointer=1 by default [orabug 67188919] - [xen] check to see if hypervisor supports memory reservation change (Chuck Anderson) [orabug 7556514] - [net] Enable entropy for bnx2,bnx2x,e1000e,igb,ixgb,ixgbe,ixgbevf (John Sobecki) [orabug 10315433] - [NET] Add xen pv netconsole support (Tina Yang) [orabug 6993043] [bz 7258] - [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839] - fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042] - [rds] Patch rds to 1.4.2-20 (Andy Grover) [orabug 9471572, 9344105] RDS: Fix BUG_ONs to not fire when in a tasklet ipoib: Fix lockup of the tx queue RDS: Do not call set_page_dirty() with irqs off (Sherman Pun) RDS: Properly unmap when getting a remote access error (Tina Yang) RDS: Fix locking in rds_send_drop_to() - [xen] PVHVM guest with PoD crashes under memory pressure (Chuck Anderson) [orabug 9107465] - [xen] PV guest with FC HBA hangs during shutdown (Chuck Anderson) [orabug 9764220] - Support 256GB+ memory for pv guest (Mukesh Rathor) [orabug 9450615] - fix overcommit memory to use percpu_counter for el5 (KOSAKI Motohiro, Guru Anbalagane) [orabug 6124033] - [ipmi] make configurable timeouts for kcs of ipmi [orabug 9752208] - [ib] fix memory corruption (Andy Grover) [orabug 9972346] - [aio] patch removes limit on number of retries (Srinivas Eeda) [orabug 10044782] - [loop] Do not call loop_unplug for not configured loop device (orabug 10314497)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1479 CVE-2011-1162 CVE-2011-1898 CVE-2011-2203 CVE-2011-2494 CVE-2011-3363 CVE-2011-4110	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	kernel
Definition Synopsis:
Oracle Linux 5.x Packages match section kernel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5-1.4.9-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5-2.0.5-1.el5 AND kernel-PAE is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-debug is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-doc is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-headers is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-xen is earlier than 0:2.6.18-274.12.1.0.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-274.12.1.0.1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5PAE-1.4.9-1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5debug-1.4.9-1.el5 AND ocfs2 is earlier than 0:2.6.18-274.12.1.0.1.el5xen-1.4.9-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5PAE-2.0.5-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5debug-2.0.5-1.el5 AND oracleasm is earlier than 0:2.6.18-274.12.1.0.1.el5xen-2.0.5-1.el5

Definition Id: oval:org.mitre.oval:def:27753

Oval ID:	oval:org.mitre.oval:def:27753
Title:	DEPRECATED: ELSA-2011-1424 -- perl security update (moderate)
Description:	[4:5.10.1-119.1] - 731246 (CVE-2011-2939)CVE-2011-2939 heap overflow - decoding Unicode string - 743010 - perl: code injection vulnerability in Digest->new() - Resolves: rhbz#743090, rhbz#743092
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1424 CVE-2011-2939 CVE-2011-3597	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	perl
Definition Synopsis:
Oracle Linux 6.x Packages match section perl is earlier than 0:5.10.1-119.el6_1.1 AND perl-Archive-Extract is earlier than 0:0.38-119.el6_1.1 AND perl-Archive-Tar is earlier than 0:1.58-119.el6_1.1 AND perl-CGI is earlier than 0:3.51-119.el6_1.1 AND perl-CPAN is earlier than 0:1.9402-119.el6_1.1 AND perl-CPANPLUS is earlier than 0:0.88-119.el6_1.1 AND perl-Compress-Raw-Zlib is earlier than 0:2.023-119.el6_1.1 AND perl-Compress-Zlib is earlier than 0:2.020-119.el6_1.1 AND perl-Digest-SHA is earlier than 0:5.47-119.el6_1.1 AND perl-ExtUtils-CBuilder is earlier than 0:0.27-119.el6_1.1 AND perl-ExtUtils-Embed is earlier than 0:1.28-119.el6_1.1 AND perl-ExtUtils-MakeMaker is earlier than 0:6.55-119.el6_1.1 AND perl-ExtUtils-ParseXS is earlier than 0:2.2003.0-119.el6_1.1 AND perl-File-Fetch is earlier than 0:0.26-119.el6_1.1 AND perl-IO-Compress-Base is earlier than 0:2.020-119.el6_1.1 AND perl-IO-Compress-Zlib is earlier than 0:2.020-119.el6_1.1 AND perl-IO-Zlib is earlier than 0:1.09-119.el6_1.1 AND perl-IPC-Cmd is earlier than 0:0.56-119.el6_1.1 AND perl-Locale-Maketext-Simple is earlier than 0:0.18-119.el6_1.1 AND perl-Log-Message is earlier than 0:0.02-119.el6_1.1 AND perl-Log-Message-Simple is earlier than 0:0.04-119.el6_1.1 AND perl-Module-Build is earlier than 0:0.3500-119.el6_1.1 AND perl-Module-CoreList is earlier than 0:2.18-119.el6_1.1 AND perl-Module-Load is earlier than 0:0.16-119.el6_1.1 AND perl-Module-Load-Conditional is earlier than 0:0.30-119.el6_1.1 AND perl-Module-Loaded is earlier than 0:0.02-119.el6_1.1 AND perl-Module-Pluggable is earlier than 0:3.90-119.el6_1.1 AND perl-Object-Accessor is earlier than 0:0.34-119.el6_1.1 AND perl-Package-Constants is earlier than 0:0.02-119.el6_1.1 AND perl-Params-Check is earlier than 0:0.26-119.el6_1.1 AND perl-Parse-CPAN-Meta is earlier than 0:1.40-119.el6_1.1 AND perl-Pod-Escapes is earlier than 0:1.04-119.el6_1.1 AND perl-Pod-Simple is earlier than 0:3.13-119.el6_1.1 AND perl-Term-UI is earlier than 0:0.20-119.el6_1.1 AND perl-Test-Harness is earlier than 0:3.17-119.el6_1.1 AND perl-Test-Simple is earlier than 0:0.92-119.el6_1.1 AND perl-Time-HiRes is earlier than 0:1.9721-119.el6_1.1 AND perl-Time-Piece is earlier than 0:1.15-119.el6_1.1 AND perl-core is earlier than 0:5.10.1-119.el6_1.1 AND perl-devel is earlier than 0:5.10.1-119.el6_1.1 AND perl-libs is earlier than 0:5.10.1-119.el6_1.1 AND perl-parent is earlier than 0:0.221-119.el6_1.1 AND perl-suidperl is earlier than 0:5.10.1-119.el6_1.1 AND perl-version is earlier than 0:0.77-119.el6_1.1

Definition Id: oval:org.mitre.oval:def:27800

Oval ID:	oval:org.mitre.oval:def:27800
Title:	DEPRECATED: ELSA-2012-0429 -- gnutls security update (important)
Description:	[2.8.5-4.2] - fix CVE-2012-1573 - security issue in packet parsing (#805432) - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0429 CVE-2011-4128 CVE-2012-1573	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 6.x Packages match section gnutls is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-devel is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-guile is earlier than 0:2.8.5-4.el6_2.2 AND gnutls-utils is earlier than 0:2.8.5-4.el6_2.2

Definition Id: oval:org.mitre.oval:def:27801

Oval ID:	oval:org.mitre.oval:def:27801
Title:	ELSA-2011-1530 -- Oracle Linux 6 kernel security, bug fix and enhancement update (moderate)
Description:	[2.6.32-220.el6] - [drm] i915: fix unmap race condition introduced with VT-d fix (Dave Airlie) [750583] - [scsi] iscsi: revert lockless queuecommand dispatch (Rob Evers) [751426]
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1530 CVE-2011-1020 CVE-2011-3347 CVE-2011-3638 CVE-2011-4110	Version:	3
Platform(s):	Oracle Linux 6	Product(s):	kernel
Definition Synopsis:
Oracle Linux 6.x Packages match section kernel is earlier than 0:2.6.32-220.el6 AND kernel-debug is earlier than 0:2.6.32-220.el6 AND kernel-debug-devel is earlier than 0:2.6.32-220.el6 AND kernel-devel is earlier than 0:2.6.32-220.el6 AND kernel-doc is earlier than 0:2.6.32-220.el6 AND kernel-firmware is earlier than 0:2.6.32-220.el6 AND kernel-headers is earlier than 0:2.6.32-220.el6 AND perf is earlier than 0:2.6.32-220.el6 AND python-perf is earlier than 0:2.6.32-220.el6

Definition Id: oval:org.mitre.oval:def:27811

Oval ID:	oval:org.mitre.oval:def:27811
Title:	DEPRECATED: ELSA-2012-0518 -- openssl security update (important)
Description:	openssl: [1.0.0-20.4] - fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185) openssl098e: [0.9.8e-17.el6_2.2] - Updated the description [0.9.8e-17.2] - fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0518 CVE-2012-2110	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	openssl openssl097a openssl098e
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-22.el5_8.3 AND openssl097a is earlier than 0:0.9.7a-11.el5_8.2 AND openssl-devel is earlier than 0:0.9.8e-22.el5_8.3 AND openssl-perl is earlier than 0:0.9.8e-22.el5_8.3 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-20.el6_2.4 AND openssl098e is earlier than 0:0.9.8e-17.0.1.el6_2.2 AND openssl-devel is earlier than 0:1.0.0-20.el6_2.4 AND openssl-perl is earlier than 0:1.0.0-20.el6_2.4 AND openssl-static is earlier than 0:1.0.0-20.el6_2.4

Definition Id: oval:org.mitre.oval:def:27823

Oval ID:	oval:org.mitre.oval:def:27823
Title:	ELSA-2012-0480-1 -- kernel security, bug fix, and enhancement update (important)
Description:	[2.6.18-308.4.1.0.1.el5] - [net] bonding: fix carrier detect when bond is down [orabug 12377284] - [mm] fix hugetlb page leak (Dave McCracken) [orabug 12375075] - fix ia64 build error due to add-support-above-32-vcpus.patch(Zhenzhong Duan) - [x86] use dynamic vcpu_info remap to support more than 32 vcpus (Zhenzhong Duan) - [x86] Fix lvt0 reset when hvm boot up with noapic param - [scsi] remove printk's when doing I/O to a dead device (John Sobecki, Chris Mason) [orabug 12342275] - [char] ipmi: Fix IPMI errors due to timing problems (Joe Jin) [orabug 12561346] - [scsi] Fix race when removing SCSI devices (Joe Jin) [orabug 12404566] - [net] net: Redo the broken redhat netconsole over bonding (Tina Yang) [orabug 12740042] - [fs] nfs: Fix __put_nfs_open_context() NULL pointer panic (Joe Jin) [orabug 12687646] - [scsi] fix scsi hotplug and rescan race [orabug 10260172] - fix filp_close() race (Joe Jin) [orabug 10335998] - make xenkbd.abs_pointer=1 by default [orabug 67188919] - [xen] check to see if hypervisor supports memory reservation change (Chuck Anderson) [orabug 7556514] - [net] Enable entropy for bnx2,bnx2x,e1000e,igb,ixgb,ixgbe,ixgbevf (John Sobecki) [orabug 10315433] - [NET] Add xen pv netconsole support (Tina Yang) [orabug 6993043] [bz 7258] - [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839] - fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042] - [rds] Patch rds to 1.4.2-20 (Andy Grover) [orabug 9471572, 9344105] RDS: Fix BUG_ONs to not fire when in a tasklet ipoib: Fix lockup of the tx queue RDS: Do not call set_page_dirty() with irqs off (Sherman Pun) RDS: Properly unmap when getting a remote access error (Tina Yang) RDS: Fix locking in rds_send_drop_to() - [xen] PVHVM guest with PoD crashes under memory pressure (Chuck Anderson) [orabug 9107465] - [xen] PV guest with FC HBA hangs during shutdown (Chuck Anderson) [orabug 9764220] - Support 256GB+ memory for pv guest (Mukesh Rathor) [orabug 9450615] - fix overcommit memory to use percpu_counter for el5 (KOSAKI Motohiro, Guru Anbalagane) [orabug 6124033] - [ipmi] make configurable timeouts for kcs of ipmi [orabug 9752208] - [ib] fix memory corruption (Andy Grover) [orabug 9972346]
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0480-1 CVE-2012-1583	Version:	5
Platform(s):	Oracle Linux 5	Product(s):	kernel ocfs2 oracleasm kernel-PAE kernel-PAE-devel kernel-debug kernel-debug-devel kernel-devel kernel-doc kernel-headers kernel-xen kernel-xen-devel
Definition Synopsis:
Oracle Linux 5.x Packages match section kernel is earlier than 0:2.6.18-308.4.1.0.1.el5 AND ocfs2-2.6.18-308.4.1.0.1.el5 is earlier than 0:1.4.9-1.el5 AND oracleasm-2.6.18-308.4.1.0.1.el5 is earlier than 0:2.0.5-1.el5 AND kernel-PAE is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-debug is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-devel is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-doc is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-headers is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-xen is earlier than 0:2.6.18-308.4.1.0.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-308.4.1.0.1.el5 AND ocfs2-2.6.18-308.4.1.0.1.el5PAE is earlier than 0:1.4.9-1.el5 AND ocfs2-2.6.18-308.4.1.0.1.el5debug is earlier than 0:1.4.9-1.el5 AND ocfs2-2.6.18-308.4.1.0.1.el5xen is earlier than 0:1.4.9-1.el5 AND oracleasm-2.6.18-308.4.1.0.1.el5PAE is earlier than 0:2.0.5-1.el5 AND oracleasm-2.6.18-308.4.1.0.1.el5debug is earlier than 0:2.0.5-1.el5 AND oracleasm-2.6.18-308.4.1.0.1.el5xen is earlier than 0:2.0.5-1.el5

Definition Id: oval:org.mitre.oval:def:27835

Oval ID:	oval:org.mitre.oval:def:27835
Title:	DEPRECATED: ELSA-2012-0397 -- glibc security update (moderate)
Description:	[2.5-81.el5_8.1] - Add dist tag [when building file lists (#784646).] - Avoid nargs integer overflow which could be used to bypass FORTIFY_SOURCE (#794813)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0397 CVE-2012-0864	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	glibc
Definition Synopsis:
Oracle Linux 5.x Packages match section glibc is earlier than 0:2.5-81.el5_8.1 AND glibc-common is earlier than 0:2.5-81.el5_8.1 AND glibc-devel is earlier than 0:2.5-81.el5_8.1 AND glibc-headers is earlier than 0:2.5-81.el5_8.1 AND glibc-utils is earlier than 0:2.5-81.el5_8.1 AND nscd is earlier than 0:2.5-81.el5_8.1

Definition Id: oval:org.mitre.oval:def:27873

Oval ID:	oval:org.mitre.oval:def:27873
Title:	DEPRECATED: ELSA-2012-0324 -- libxml2 security update (moderate)
Description:	[2.7.6-4.0.1.el6_2.4] - Update doc/redhat.gif in tarball - Add libxml2-oracle-enterprise.patch and update logos in tarball [2.7.6-4.el6_2.4] - remove chunk in patch related to configure.in as it breaks rebuild - Resolves: rhbz#788845 [2.7.6-4.el6_2.3] - fix previous build to force compilation of randomization code - Resolves: rhbz#788845 [2.7.6-4.el6_2.2] - adds randomization to hash and dict structures CVE-2012-0841 - Resolves: rhbz#788845
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0324 CVE-2012-0841	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	libxml2
Definition Synopsis:
Oracle Linux 5 release section Oracle Linux 5.x Packages match section libxml2 is earlier than 0:2.6.26-2.1.15.0.1.el5_8.2 AND libxml2-devel is earlier than 0:2.6.26-2.1.15.0.1.el5_8.2 AND libxml2-python is earlier than 0:2.6.26-2.1.15.0.1.el5_8.2 AND Oracle Linux 6 release section Oracle Linux 6.x Packages match section libxml2 is earlier than 0:2.7.6-4.0.1.el6_2.4 AND libxml2-devel is earlier than 0:2.7.6-4.0.1.el6_2.4 AND libxml2-python is earlier than 0:2.7.6-4.0.1.el6_2.4 AND libxml2-static is earlier than 0:2.7.6-4.0.1.el6_2.4

Definition Id: oval:org.mitre.oval:def:27898

Oval ID:	oval:org.mitre.oval:def:27898
Title:	DEPRECATED: ELSA-2012-0058 -- glibc security and bug fix update (moderate)
Description:	[2.12-1.47.el6_2.5] - Avoid high cpu usage when accept fails with EMFILE (#767692) [2.12-1.47.el6_2.4] - Make implementation of ARENAS_TEST and ARENAS_MAX match documentation (#769594) - Check malloc arena atomically (#769594) [2.12-1.47.el6_2.3] - Check values from TZ file header (#767692) [2.12-1.47.el6_2.2] - Correctly reparse group line after enlarging the buffer (#766484) [2.12-1.47.el6_2.1] - Fix grouping and reuse other locales in various locales (#754116)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0058 CVE-2009-5029 CVE-2011-4609	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	glibc
Definition Synopsis:
Oracle Linux 6.x Packages match section glibc is earlier than 0:2.12-1.47.el6_2.5 AND glibc-common is earlier than 0:2.12-1.47.el6_2.5 AND glibc-devel is earlier than 0:2.12-1.47.el6_2.5 AND glibc-headers is earlier than 0:2.12-1.47.el6_2.5 AND glibc-static is earlier than 0:2.12-1.47.el6_2.5 AND glibc-utils is earlier than 0:2.12-1.47.el6_2.5 AND nscd is earlier than 0:2.12-1.47.el6_2.5

Definition Id: oval:org.mitre.oval:def:27901

Oval ID:	oval:org.mitre.oval:def:27901
Title:	DEPRECATED: ELSA-2012-0428 -- gnutls security update (important)
Description:	[1.4.1-7.2] - fix CVE-2011-4128 - buffer overflow in gnutls_session_get_data() (#752308) - fix CVE-2012-1569 - missing length check when decoding DER lengths (#804920) - fix CVE-2012-1573 - security issue in packet parsing (#805432)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0428 CVE-2011-4128 CVE-2012-1569 CVE-2012-1573	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x Packages match section gnutls is earlier than 0:1.4.1-7.el5_8.2 AND gnutls-devel is earlier than 0:1.4.1-7.el5_8.2 AND gnutls-utils is earlier than 0:1.4.1-7.el5_8.2

Definition Id: oval:org.mitre.oval:def:27912

Oval ID:	oval:org.mitre.oval:def:27912
Title:	DEPRECATED: ELSA-2012-0480 -- kernel security, bug fix, and enhancement update (important)
Description:	[2.6.18-308.4.1.el5] - [net] ipv6: fix skb double free in xfrm6_tunnel (Jiri Benc) [752305 743375] {CVE-2012-1583} [2.6.18-308.3.1.el5] - [net] be2net: cancel be_worker during EEH recovery (Ivan Vecera) [805462 773735] - [net] be2net: add vlan/rx-mode/flow-control config to be_setup (Ivan Vecera) [805462 773735] - [x86] disable TSC synchronization when using kvmclock (Marcelo Tosatti) [805460 799170] - [fs] vfs: fix LOOKUP_DIRECTORY not propagated to managed_dentry (Ian Kent) [801726 798809] - [fs] vfs: fix d_instantiate_unique (Ian Kent) [801726 798809] - [fs] nfs: allow high priority COMMITs to bypass inode commit lock (Jeff Layton) [799941 773777] - [fs] nfs: don't skip COMMITs if system under is mem pressure (Jeff Layton) [799941 773777] - [scsi] qla2xxx: Read the HCCR register to flush any PCIe writes (Chad Dupuis) [798748 772192] - [scsi] qla2xxx: Complete mbox cmd timeout before next reset cycle (Chad Dupuis) [798748 772192] - [s390] qdio: wrong buffers-used counter for ERROR buffers (Hendrik Brueckner) [801724 790840] - [net] bridge: Reset IPCB when entering IP stack (Herbert Xu) [804721 749813] - [fs] procfs: add hidepid= and gid= mount options (Jerome Marchand) [770649 770650] - [fs] procfs: parse mount options (Jerome Marchand) [770649 770650] [2.6.18-308.2.1.el5] - [fs] nfs: nfs_fhget should wait on I_NEW instead of I_LOCK (Sachin Prabhu) [795664 785062]
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0480 CVE-2012-1583	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	kernel
Definition Synopsis:
Oracle Linux 5.x Packages match section kernel is earlier than 0:2.6.18-308.4.1.el5 AND ocfs2 is earlier than 0:2.6.18-308.4.1.el5-1.4.9-1.el5 AND oracleasm is earlier than 0:2.6.18-308.4.1.el5-2.0.5-1.el5 AND kernel-PAE is earlier than 0:2.6.18-308.4.1.el5 AND kernel-PAE-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-debug is earlier than 0:2.6.18-308.4.1.el5 AND kernel-debug-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-devel is earlier than 0:2.6.18-308.4.1.el5 AND kernel-doc is earlier than 0:2.6.18-308.4.1.el5 AND kernel-headers is earlier than 0:2.6.18-308.4.1.el5 AND kernel-xen is earlier than 0:2.6.18-308.4.1.el5 AND kernel-xen-devel is earlier than 0:2.6.18-308.4.1.el5 AND ocfs2 is earlier than 0:2.6.18-308.4.1.el5PAE-1.4.9-1.el5 AND ocfs2 is earlier than 0:2.6.18-308.4.1.el5debug-1.4.9-1.el5 AND ocfs2 is earlier than 0:2.6.18-308.4.1.el5xen-1.4.9-1.el5 AND oracleasm is earlier than 0:2.6.18-308.4.1.el5PAE-2.0.5-1.el5 AND oracleasm is earlier than 0:2.6.18-308.4.1.el5debug-2.0.5-1.el5 AND oracleasm is earlier than 0:2.6.18-308.4.1.el5xen-2.0.5-1.el5

Definition Id: oval:org.mitre.oval:def:27927

Oval ID:	oval:org.mitre.oval:def:27927
Title:	DEPRECATED: ELSA-2012-0126 -- glibc security update (moderate)
Description:	[2.5-65.el5_7.3] - Use correct type when casting d_tag (#767687) - Report write error in addmnt even for cached streams (#767687) - ldd: Never run file directly (#767687). - Workaround misconfigured system (#767687) [2.5-65.el5_7.2] - Check values from TZ file header (#767687)
Family:	unix	Class:	patch
Reference(s):	ELSA-2012-0126 CVE-2010-0830 CVE-2009-5029 CVE-2009-5064 CVE-2011-1089 CVE-2011-4609	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	glibc
Definition Synopsis:
Oracle Linux 5.x Packages match section glibc is earlier than 0:2.5-65.el5_7.3 AND glibc-common is earlier than 0:2.5-65.el5_7.3 AND glibc-devel is earlier than 0:2.5-65.el5_7.3 AND glibc-headers is earlier than 0:2.5-65.el5_7.3 AND glibc-utils is earlier than 0:2.5-65.el5_7.3 AND nscd is earlier than 0:2.5-65.el5_7.3

Definition Id: oval:org.mitre.oval:def:28024

Oval ID:	oval:org.mitre.oval:def:28024
Title:	DEPRECATED: ELSA-2011-0677 -- openssl security, bug fix, and enhancement update (moderate)
Description:	[1.0.0-10] - fix OCSP stapling vulnerability - CVE-2011-0014 (#676063) - correct the README.FIPS document [1.0.0-8] - add -x931 parameter to openssl genrsa command to use the ANSI X9.31 key generation method - use FIPS-186-3 method for DSA parameter generation - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable to allow using MD5 when the system is in the maintenance state even if the /proc fips flag is on - make openssl pkcs12 command work by default in the FIPS mode [1.0.0-7] - listen on ipv6 wildcard in s_server so we accept connections from both ipv4 and ipv6 (#601612) - fix openssl speed command so it can be used in the FIPS mode with FIPS allowed ciphers (#619762) [1.0.0-6] - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG - CVE-2010-3864 (#649304) [1.0.0-5] - fix race in extension parsing code - CVE-2010-3864 (#649304)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-0677 CVE-2011-0014	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-10.el6 AND openssl-devel is earlier than 0:1.0.0-10.el6 AND openssl-perl is earlier than 0:1.0.0-10.el6 AND openssl-static is earlier than 0:1.0.0-10.el6

Definition Id: oval:org.mitre.oval:def:28049

Oval ID:	oval:org.mitre.oval:def:28049
Title:	ELSA-2011-1526 -- glibc security, bug fix, and enhancement update (low)
Description:	A flaw was found in the way the ldd utility identified dynamically linked libraries. If an attacker could trick a user into running ldd on a malicious binary, it could result in arbitrary code execution with the privileges of the user running ldd. (CVE-2009-5064) It was found that the glibc addmntent() function, used by various mount helper utilities, did not handle certain errors correctly when updating the mtab (mounted file systems table) file. If such utilities had the setuid bit set, a local attacker could use this flaw to corrupt the mtab file. (CVE-2011-1089)
Family:	unix	Class:	patch
Reference(s):	ELSA-2011-1526 CVE-2009-5064 CVE-2011-1089	Version:	3
Platform(s):	Oracle Linux 6	Product(s):	glibc
Definition Synopsis:
Oracle Linux 6.x Packages match section glibc is earlier than 0:2.12-1.47.el6 AND glibc-common is earlier than 0:2.12-1.47.el6 AND glibc-devel is earlier than 0:2.12-1.47.el6 AND glibc-headers is earlier than 0:2.12-1.47.el6 AND glibc-static is earlier than 0:2.12-1.47.el6 AND glibc-utils is earlier than 0:2.12-1.47.el6 AND nscd is earlier than 0:2.12-1.47.el6

Definition Id: oval:org.mitre.oval:def:28187

Oval ID:	oval:org.mitre.oval:def:28187
Title:	DEPRECATED: ELSA-2010-0979 -- openssl security update (moderate)
Description:	[1.0.0-4.2] - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG - CVE-2010-3864 (#649304) [1.0.0-4.1] - fix race in extension parsing code - CVE-2010-3864 (#649304)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0979 CVE-2010-3864 CVE-2010-4180	Version:	4
Platform(s):	Oracle Linux 6	Product(s):	openssl
Definition Synopsis:
Oracle Linux 6.x Packages match section openssl is earlier than 0:1.0.0-4.el6_0.2 AND openssl-devel is earlier than 0:1.0.0-4.el6_0.2 AND openssl-perl is earlier than 0:1.0.0-4.el6_0.2 AND openssl-static is earlier than 0:1.0.0-4.el6_0.2

CPE : Common Platform Enumeration

Type	Description	Count
Application	Andy Armstrong Cgi-Simple cpe:2.3:a:andy_armstrong:cgi-simple:1.112:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.111:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.110:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.109:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.108:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.107:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.106:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.105:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.104:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.103:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.1.2:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.1.1:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.1:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:1.0:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:0.83:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:0.082:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:0.081:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:0.080:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:0.079:::::::* cpe:2.3:a:andy_armstrong:cgi-simple:0.078:::::::*	20
Application	Andy Armstrong Cgi.Pm cpe:2.3:a:andy_armstrong:cgi.pm:3.49:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.48:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.47:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.46:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.45:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.44:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.43:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.42:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.41:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.40:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.39:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.38:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.37:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.36:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.35:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.34:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.33:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.32:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.31:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.30:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.29:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.28:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.27:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.26:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.25:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.24:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.23:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.22:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.21:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.20:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.19:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.18:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.17:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.16:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.15:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.14:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.13:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.12:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.11:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.10:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.09:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.08:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.07:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.06:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.05:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.04:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.03:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.02:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.01:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:3.00:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.99:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.98:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.97:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.96:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.95:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.94:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.93:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.92:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.91:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.90:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.89:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.88:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.87:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.86:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.85:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.84:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.83:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.82:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.81:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.80:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.79:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.78:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.77:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.76:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.752:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.751:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.75:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.74:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.73:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.72:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.71:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.70:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.69:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.68:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.67:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.66:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.65:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.64:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.63:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.62:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.61:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.60:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.59:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.58:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.57:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.56:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.55:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.54:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.53:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.52:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.51:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.50:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.49:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.48:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.47:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.46:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.45:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.44:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.43:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.42:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.41:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.40:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.39:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.38:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.37:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.36:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.35:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.34:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.33:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.32:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.31:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.30:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.29:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.28:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.27:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.26:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.25:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.24:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.23:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.22:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.21:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.20:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.19:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.18:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.17:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.16:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.15:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.14:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.13:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.01:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:2.0:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.57:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.56:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.55:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.54:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.53:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.52:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.51:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.50:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.45:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.44:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.43:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.42:::::::* cpe:2.3:a:andy_armstrong:cgi.pm:1.4:::::::*	154
Application	Apache Struts cpe:2.3:a:apache:struts:2.3.9:::::::* cpe:2.3:a:apache:struts:2.3.8:::::::* cpe:2.3:a:apache:struts:2.3.7:::::::* cpe:2.3:a:apache:struts:2.3.6:::::::* cpe:2.3:a:apache:struts:2.3.5:::::::* cpe:2.3:a:apache:struts:2.3.4.1:::::::* cpe:2.3:a:apache:struts:2.3.4:::::::* cpe:2.3:a:apache:struts:2.3.3:::::::* cpe:2.3:a:apache:struts:2.3.17:::::::* cpe:2.3:a:apache:struts:2.3.16.3:::::::* cpe:2.3:a:apache:struts:2.3.16.2:::::::* cpe:2.3:a:apache:struts:2.3.16.1:::::::* cpe:2.3:a:apache:struts:2.3.16:::::::* cpe:2.3:a:apache:struts:2.3.15.3:::::::* cpe:2.3:a:apache:struts:2.3.15.2:::::::* cpe:2.3:a:apache:struts:2.3.15.1:::::::* cpe:2.3:a:apache:struts:2.3.15:::::::* cpe:2.3:a:apache:struts:2.3.14.3:::::::* cpe:2.3:a:apache:struts:2.3.14.2:::::::* cpe:2.3:a:apache:struts:2.3.14.1:::::::* cpe:2.3:a:apache:struts:2.3.14:::::::* cpe:2.3:a:apache:struts:2.3.13:::::::* cpe:2.3:a:apache:struts:2.3.12:::::::* cpe:2.3:a:apache:struts:2.3.11:::::::* cpe:2.3:a:apache:struts:2.3.10:::::::* cpe:2.3:a:apache:struts:2.3.1.2:::::::* cpe:2.3:a:apache:struts:2.3.1.1:::::::* cpe:2.3:a:apache:struts:2.3.1:::::::* cpe:2.3:a:apache:struts:2.2.3.1:::::::* cpe:2.3:a:apache:struts:2.2.3:::::::* cpe:2.3:a:apache:struts:2.2.1.1:::::::* cpe:2.3:a:apache:struts:2.2.1:::::::* cpe:2.3:a:apache:struts:2.1.8.1:::::::* cpe:2.3:a:apache:struts:2.1.8:::::::* cpe:2.3:a:apache:struts:2.1.7:::::::* cpe:2.3:a:apache:struts:2.1.6:::::::* cpe:2.3:a:apache:struts:2.1.5:::::::* cpe:2.3:a:apache:struts:2.1.4:::::::* cpe:2.3:a:apache:struts:2.1.3:::::::* cpe:2.3:a:apache:struts:2.1.2_beta:::::::* cpe:2.3:a:apache:struts:2.1.2:::::::* cpe:2.3:a:apache:struts:2.1.1:::::::* cpe:2.3:a:apache:struts:2.1.0:::::::* cpe:2.3:a:apache:struts:2.1:::::::* cpe:2.3:a:apache:struts:2.0.9:::::::* cpe:2.3:a:apache:struts:2.0.8:::::::* cpe:2.3:a:apache:struts:2.0.7:::::::* cpe:2.3:a:apache:struts:2.0.6:::::::* cpe:2.3:a:apache:struts:2.0.5:::::::* cpe:2.3:a:apache:struts:2.0.4:::::::* cpe:2.3:a:apache:struts:2.0.3:::::::* cpe:2.3:a:apache:struts:2.0.2:::::::* cpe:2.3:a:apache:struts:2.0.14:::::::* cpe:2.3:a:apache:struts:2.0.13:::::::* cpe:2.3:a:apache:struts:2.0.12:::::::* cpe:2.3:a:apache:struts:2.0.11.2:::::::* cpe:2.3:a:apache:struts:2.0.11.1:::::::* cpe:2.3:a:apache:struts:2.0.11:::::::* cpe:2.3:a:apache:struts:2.0.10:::::::* cpe:2.3:a:apache:struts:2.0.1:::::::* cpe:2.3:a:apache:struts:2.0.0:::::::* cpe:2.3:a:apache:struts:1.3.9:::::::* cpe:2.3:a:apache:struts:1.3.8:::::::* cpe:2.3:a:apache:struts:1.3.7:::::::* cpe:2.3:a:apache:struts:1.3.6:::::::* cpe:2.3:a:apache:struts:1.3.5:::::::* cpe:2.3:a:apache:struts:1.3.10:::::::* cpe:2.3:a:apache:struts:1.2.9:::::::* cpe:2.3:a:apache:struts:1.2.8:::::::* cpe:2.3:a:apache:struts:1.2.7:::::::* cpe:2.3:a:apache:struts:1.2.6:::::::* cpe:2.3:a:apache:struts:1.2.5:::::::* cpe:2.3:a:apache:struts:1.2.4:::::::* cpe:2.3:a:apache:struts:1.2.3:::::::* cpe:2.3:a:apache:struts:1.2.2:::::::* cpe:2.3:a:apache:struts:1.2.1:::::::* cpe:2.3:a:apache:struts:1.2.0:::::::* cpe:2.3:a:apache:struts:1.1:::::::* cpe:2.3:a:apache:struts:1.1:rc2:::::: cpe:2.3:a:apache:struts:1.1:b2:::::: cpe:2.3:a:apache:struts:1.1:b1:::::: cpe:2.3:a:apache:struts:1.1:rc1:::::: cpe:2.3:a:apache:struts:1.1:b3:::::: cpe:2.3:a:apache:struts:1.0.2:::::::* cpe:2.3:a:apache:struts:1.0.1:::::::* cpe:2.3:a:apache:struts:1.0:::::::* cpe:2.3:a:apache:struts:1.0:beta1:::::: cpe:2.3:a:apache:struts:1.0:beta2:::::: cpe:2.3:a:apache:struts:1.0:beta3:::::: cpe:2.3:a:apache:struts::::::::	90
Application	f5 Arx cpe:2.3:a:f5:arx:6.4.0:::::::* cpe:2.3:a:f5:arx:6.3.0:::::::* cpe:2.3:a:f5:arx:6.2.0:::::::* cpe:2.3:a:f5:arx:6.1.1:::::::* cpe:2.3:a:f5:arx:6.1.0:::::::* cpe:2.3:a:f5:arx:6.0.0:::::::*	6
Application	f5 Big-Ip Access Policy Manager cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.4:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.3:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.2:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.1:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.0:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:10.1.0:::::::* cpe:2.3:a:f5:big-ip_access_policy_manager:::::::: cpe:2.3:a:f5:big-ip_access_policy_manager:::::clients:::*	10
Application	f5 Big-Ip Analytics cpe:2.3:a:f5:big-ip_analytics:11.1.0:::::::* cpe:2.3:a:f5:big-ip_analytics:11.0.0:::::::* cpe:2.3:a:f5:big-ip_analytics::::::::	3
Application	f5 Big-Ip Application Security Manager cpe:2.3:a:f5:big-ip_application_security_manager:11.1.0:hf2:::::: cpe:2.3:a:f5:big-ip_application_security_manager:11.1.0:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:11.0.0:hf1:::::: cpe:2.3:a:f5:big-ip_application_security_manager:11.0.0:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.2.4:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.2.3:hf1:::::: cpe:2.3:a:f5:big-ip_application_security_manager:10.2.3:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.2.2:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.2.1:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.2.0:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.1.0:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.0.1:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:10.0.0:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:9.4.8:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:9.4.7:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:9.4.6:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:9.4.5:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:9.4.4:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:9.3.0:::::::* cpe:2.3:a:f5:big-ip_application_security_manager:9.2.0:hf4:::::: cpe:2.3:a:f5:big-ip_application_security_manager:9.2.0:::::::* cpe:2.3:a:f5:big-ip_application_security_manager::::::::	22
Application	f5 Big-Ip Edge Gateway cpe:2.3:a:f5:big-ip_edge_gateway:11.1.0:::::::* cpe:2.3:a:f5:big-ip_edge_gateway:11.0.0:::::::* cpe:2.3:a:f5:big-ip_edge_gateway:10.2.4:::::::* cpe:2.3:a:f5:big-ip_edge_gateway:10.2.3:::::::* cpe:2.3:a:f5:big-ip_edge_gateway:10.2.2:::::::* cpe:2.3:a:f5:big-ip_edge_gateway:10.2.1:::::::* cpe:2.3:a:f5:big-ip_edge_gateway:10.2.0:::::::* cpe:2.3:a:f5:big-ip_edge_gateway:10.1.0:::::::* cpe:2.3:a:f5:big-ip_edge_gateway::::::::	9
Application	f5 Big-Ip Global Traffic Manager cpe:2.3:a:f5:big-ip_global_traffic_manager:11.1.0:hf2:::::: cpe:2.3:a:f5:big-ip_global_traffic_manager:11.1.0:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:11.0.0:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:11.0.0:hf1:::::: cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.4:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.3:hf1:::::: cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.3:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.2:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.1:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:10.2.0:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:10.1.0:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:10.0.1:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:10.0.0:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager:9.4.8:hf4:::::: cpe:2.3:a:f5:big-ip_global_traffic_manager:9.2.2:::::::* cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::	16
Application	f5 Big-Ip Link Controller cpe:2.3:a:f5:big-ip_link_controller:11.1.0:::::::* cpe:2.3:a:f5:big-ip_link_controller:11.0.0:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.2.4:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.2.3:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.2.2:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.2.1:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.2.0:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.1.0:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.0.1:::::::* cpe:2.3:a:f5:big-ip_link_controller:10.0.0:::::::* cpe:2.3:a:f5:big-ip_link_controller:9.2.2:::::::* cpe:2.3:a:f5:big-ip_link_controller::::::::	12
Application	f5 Big-Ip Local Traffic Manager cpe:2.3:a:f5:big-ip_local_traffic_manager:11.1.0:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:11.1.0:hf2:::::: cpe:2.3:a:f5:big-ip_local_traffic_manager:11.0.0:hf1:::::: cpe:2.3:a:f5:big-ip_local_traffic_manager:11.0.0:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.4:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.3:hf1:::::: cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.3:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.2:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.1:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.0:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.1.0:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.0.1:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:10.0.0:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager:9.4.8:hf4:::::: cpe:2.3:a:f5:big-ip_local_traffic_manager:9.0.0:::::::* cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::	16
Application	f5 Big-Ip Protocol Security Module cpe:2.3:a:f5:big-ip_protocol_security_module:11.1.0:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:11.0.0:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.4:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.3:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.2:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.1:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.0:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.1.0:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.0.1:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:10.0.0:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:9.4.8:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:9.4.7:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:9.4.6:::::::* cpe:2.3:a:f5:big-ip_protocol_security_module:9.4.5:::::::*	14
Application	f5 Big-Ip Wan Optimization Manager cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.1.0:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.0.0:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.4:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.3:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.2:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.1:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.2.0:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.1.0:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.0.1:::::::* cpe:2.3:a:f5:big-ip_wan_optimization_manager:10.0.0:::::::*	10
Application	f5 Big-Ip Webaccelerator cpe:2.3:a:f5:big-ip_webaccelerator:11.1.0:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:11.0.0:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.2.4:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.2.3:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.2.2:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.2.1:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.2.0:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.1.0:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.0.1:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:10.0.0:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.8:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.7:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.6:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.5:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.4:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.3:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.2:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.1:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.4.0:::::::* cpe:2.3:a:f5:big-ip_webaccelerator:9.2.2:::::::* cpe:2.3:a:f5:big-ip_webaccelerator::::::::	21
Application	f5 Enterprise Manager cpe:2.3:a:f5:enterprise_manager:3.0.0:::::::* cpe:2.3:a:f5:enterprise_manager:2.3.0:::::::* cpe:2.3:a:f5:enterprise_manager:2.2.0:::::::* cpe:2.3:a:f5:enterprise_manager:2.1.0:::::::*	4
Application	f5 Firepass cpe:2.3:a:f5:firepass:7.0.0:::::::* cpe:2.3:a:f5:firepass:6.1.0:::::::* cpe:2.3:a:f5:firepass:6.0.3:::::::* cpe:2.3:a:f5:firepass:6.0.2:::::::* cpe:2.3:a:f5:firepass:6.0.1:::::::* cpe:2.3:a:f5:firepass:6.0.0:::::::*	6
Application	f5 Nginx cpe:2.3:a:f5:nginx:0.9.1:::::::* cpe:2.3:a:f5:nginx:0.9.0:::::::* cpe:2.3:a:f5:nginx:0.8.9:::::::* cpe:2.3:a:f5:nginx:0.8.8:::::::* cpe:2.3:a:f5:nginx:0.8.7:::::::* cpe:2.3:a:f5:nginx:0.8.6:::::::* cpe:2.3:a:f5:nginx:0.8.55:::::::* cpe:2.3:a:f5:nginx:0.8.54:::::::* cpe:2.3:a:f5:nginx:0.8.53:::::::* cpe:2.3:a:f5:nginx:0.8.52:::::::* cpe:2.3:a:f5:nginx:0.8.51:::::::* cpe:2.3:a:f5:nginx:0.8.50:::::::* cpe:2.3:a:f5:nginx:0.8.5:::::::* cpe:2.3:a:f5:nginx:0.8.49:::::::* cpe:2.3:a:f5:nginx:0.8.48:::::::* cpe:2.3:a:f5:nginx:0.8.47:::::::* cpe:2.3:a:f5:nginx:0.8.46:::::::* cpe:2.3:a:f5:nginx:0.8.45:::::::* cpe:2.3:a:f5:nginx:0.8.44:::::::* cpe:2.3:a:f5:nginx:0.8.43:::::::* cpe:2.3:a:f5:nginx:0.8.42:::::::* cpe:2.3:a:f5:nginx:0.8.41:::::::* cpe:2.3:a:f5:nginx:0.8.40:::::::* cpe:2.3:a:f5:nginx:0.8.4:::::::* cpe:2.3:a:f5:nginx:0.8.39:::::::* cpe:2.3:a:f5:nginx:0.8.38:::::::* cpe:2.3:a:f5:nginx:0.8.37:::::::* cpe:2.3:a:f5:nginx:0.8.36:::::::* cpe:2.3:a:f5:nginx:0.8.35:::::::* cpe:2.3:a:f5:nginx:0.8.34:::::::* cpe:2.3:a:f5:nginx:0.8.33:::::::* cpe:2.3:a:f5:nginx:0.8.32:::::::* cpe:2.3:a:f5:nginx:0.8.31:::::::* cpe:2.3:a:f5:nginx:0.8.30:::::::* cpe:2.3:a:f5:nginx:0.8.3:::::::* cpe:2.3:a:f5:nginx:0.8.29:::::::* cpe:2.3:a:f5:nginx:0.8.28:::::::* cpe:2.3:a:f5:nginx:0.8.27:::::::* cpe:2.3:a:f5:nginx:0.8.26:::::::* cpe:2.3:a:f5:nginx:0.8.25:::::::* cpe:2.3:a:f5:nginx:0.8.24:::::::* cpe:2.3:a:f5:nginx:0.8.23:::::::* cpe:2.3:a:f5:nginx:0.8.22:::::::* cpe:2.3:a:f5:nginx:0.8.21:::::::* cpe:2.3:a:f5:nginx:0.8.20:::::::* cpe:2.3:a:f5:nginx:0.8.2:::::::* cpe:2.3:a:f5:nginx:0.8.19:::::::* cpe:2.3:a:f5:nginx:0.8.18:::::::* cpe:2.3:a:f5:nginx:0.8.17:::::::* cpe:2.3:a:f5:nginx:0.8.16:::::::* cpe:2.3:a:f5:nginx:0.8.15:::::::* cpe:2.3:a:f5:nginx:0.8.14:::::::* cpe:2.3:a:f5:nginx:0.8.13:::::::* cpe:2.3:a:f5:nginx:0.8.12:::::::* cpe:2.3:a:f5:nginx:0.8.11:::::::* cpe:2.3:a:f5:nginx:0.8.10:::::::* cpe:2.3:a:f5:nginx:0.8.1:::::::* cpe:2.3:a:f5:nginx:0.8.0:::::::* cpe:2.3:a:f5:nginx:0.7.9:::::::* cpe:2.3:a:f5:nginx:0.7.8:::::::* cpe:2.3:a:f5:nginx:0.7.7:::::::* cpe:2.3:a:f5:nginx:0.7.69:::::::* cpe:2.3:a:f5:nginx:0.7.68:::::::* cpe:2.3:a:f5:nginx:0.7.67:::::::* cpe:2.3:a:f5:nginx:0.7.66:::::::* cpe:2.3:a:f5:nginx:0.7.65:::::::* cpe:2.3:a:f5:nginx:0.7.64:::::::* cpe:2.3:a:f5:nginx:0.7.63:::::::* cpe:2.3:a:f5:nginx:0.7.62:::::::* cpe:2.3:a:f5:nginx:0.7.61:::::::* cpe:2.3:a:f5:nginx:0.7.60:::::::* cpe:2.3:a:f5:nginx:0.7.6:::::::* cpe:2.3:a:f5:nginx:0.7.59:::::::* cpe:2.3:a:f5:nginx:0.7.58:::::::* cpe:2.3:a:f5:nginx:0.7.57:::::::* cpe:2.3:a:f5:nginx:0.7.56:::::::* cpe:2.3:a:f5:nginx:0.7.55:::::::* cpe:2.3:a:f5:nginx:0.7.54:::::::* cpe:2.3:a:f5:nginx:0.7.53:::::::* cpe:2.3:a:f5:nginx:0.7.52:::::::* cpe:2.3:a:f5:nginx:0.7.51:::::::* cpe:2.3:a:f5:nginx:0.7.50:::::::* cpe:2.3:a:f5:nginx:0.7.5:::::::* cpe:2.3:a:f5:nginx:0.7.49:::::::* cpe:2.3:a:f5:nginx:0.7.48:::::::* cpe:2.3:a:f5:nginx:0.7.47:::::::* cpe:2.3:a:f5:nginx:0.7.46:::::::* cpe:2.3:a:f5:nginx:0.7.45:::::::* cpe:2.3:a:f5:nginx:0.7.44:::::::* cpe:2.3:a:f5:nginx:0.7.43:::::::* cpe:2.3:a:f5:nginx:0.7.42:::::::* cpe:2.3:a:f5:nginx:0.7.41:::::::* cpe:2.3:a:f5:nginx:0.7.40:::::::* cpe:2.3:a:f5:nginx:0.7.4:::::::* cpe:2.3:a:f5:nginx:0.7.39:::::::* cpe:2.3:a:f5:nginx:0.7.38:::::::* cpe:2.3:a:f5:nginx:0.7.37:::::::* cpe:2.3:a:f5:nginx:0.7.36:::::::* cpe:2.3:a:f5:nginx:0.7.35:::::::* cpe:2.3:a:f5:nginx:0.7.34:::::::* cpe:2.3:a:f5:nginx:0.7.33:::::::* cpe:2.3:a:f5:nginx:0.7.32:::::::* cpe:2.3:a:f5:nginx:0.7.31:::::::* cpe:2.3:a:f5:nginx:0.7.30:::::::* cpe:2.3:a:f5:nginx:0.7.3:::::::* cpe:2.3:a:f5:nginx:0.7.29:::::::* cpe:2.3:a:f5:nginx:0.7.28:::::::* cpe:2.3:a:f5:nginx:0.7.27:::::::* cpe:2.3:a:f5:nginx:0.7.26:::::::* cpe:2.3:a:f5:nginx:0.7.25:::::::* cpe:2.3:a:f5:nginx:0.7.24:::::::* cpe:2.3:a:f5:nginx:0.7.23:::::::* cpe:2.3:a:f5:nginx:0.7.22:::::::* cpe:2.3:a:f5:nginx:0.7.21:::::::* cpe:2.3:a:f5:nginx:0.7.20:::::::* cpe:2.3:a:f5:nginx:0.7.2:::::::* cpe:2.3:a:f5:nginx:0.7.19:::::::* cpe:2.3:a:f5:nginx:0.7.18:::::::* cpe:2.3:a:f5:nginx:0.7.17:::::::* cpe:2.3:a:f5:nginx:0.7.16:::::::* cpe:2.3:a:f5:nginx:0.7.15:::::::* cpe:2.3:a:f5:nginx:0.7.14:::::::* cpe:2.3:a:f5:nginx:0.7.13:::::::* cpe:2.3:a:f5:nginx:0.7.12:::::::* cpe:2.3:a:f5:nginx:0.7.11:::::::* cpe:2.3:a:f5:nginx:0.7.10:::::::* cpe:2.3:a:f5:nginx:0.7.1:::::::* cpe:2.3:a:f5:nginx:0.7.0:::::::* cpe:2.3:a:f5:nginx:0.6.9:::::::* cpe:2.3:a:f5:nginx:0.6.8:::::::* cpe:2.3:a:f5:nginx:0.6.7:::::::* cpe:2.3:a:f5:nginx:0.6.6:::::::* cpe:2.3:a:f5:nginx:0.6.5:::::::* cpe:2.3:a:f5:nginx:0.6.4:::::::* cpe:2.3:a:f5:nginx:0.6.39:::::::* cpe:2.3:a:f5:nginx:0.6.38:::::::* cpe:2.3:a:f5:nginx:0.6.37:::::::* cpe:2.3:a:f5:nginx:0.6.36:::::::* cpe:2.3:a:f5:nginx:0.6.35:::::::* cpe:2.3:a:f5:nginx:0.6.34:::::::* cpe:2.3:a:f5:nginx:0.6.33:::::::* cpe:2.3:a:f5:nginx:0.6.32:::::::* cpe:2.3:a:f5:nginx:0.6.31:::::::* cpe:2.3:a:f5:nginx:0.6.30:::::::* cpe:2.3:a:f5:nginx:0.6.3:::::::* cpe:2.3:a:f5:nginx:0.6.29:::::::* cpe:2.3:a:f5:nginx:0.6.28:::::::* cpe:2.3:a:f5:nginx:0.6.27:::::::* cpe:2.3:a:f5:nginx:0.6.26:::::::* cpe:2.3:a:f5:nginx:0.6.25:::::::* cpe:2.3:a:f5:nginx:0.6.24:::::::* cpe:2.3:a:f5:nginx:0.6.23:::::::* cpe:2.3:a:f5:nginx:0.6.22:::::::* cpe:2.3:a:f5:nginx:0.6.21:::::::* cpe:2.3:a:f5:nginx:0.6.20:::::::* cpe:2.3:a:f5:nginx:0.6.2:::::::* cpe:2.3:a:f5:nginx:0.6.19:::::::* cpe:2.3:a:f5:nginx:0.6.18:::::::* cpe:2.3:a:f5:nginx:0.6.17:::::::* cpe:2.3:a:f5:nginx:0.6.16:::::::* cpe:2.3:a:f5:nginx:0.6.15:::::::* cpe:2.3:a:f5:nginx:0.6.14:::::::* cpe:2.3:a:f5:nginx:0.6.13:::::::* cpe:2.3:a:f5:nginx:0.6.12:::::::* cpe:2.3:a:f5:nginx:0.6.11:::::::* cpe:2.3:a:f5:nginx:0.6.10:::::::* cpe:2.3:a:f5:nginx:0.6.1:::::::* cpe:2.3:a:f5:nginx:0.6.0:::::::* cpe:2.3:a:f5:nginx:0.5.9:::::::* cpe:2.3:a:f5:nginx:0.5.8:::::::* cpe:2.3:a:f5:nginx:0.5.7:::::::* cpe:2.3:a:f5:nginx:0.5.6:::::::* cpe:2.3:a:f5:nginx:0.5.5:::::::* cpe:2.3:a:f5:nginx:0.5.4:::::::* cpe:2.3:a:f5:nginx:0.5.38:::::::* cpe:2.3:a:f5:nginx:0.5.37:::::::* cpe:2.3:a:f5:nginx:0.5.36:::::::* cpe:2.3:a:f5:nginx:0.5.35:::::::* cpe:2.3:a:f5:nginx:0.5.34:::::::* cpe:2.3:a:f5:nginx:0.5.33:::::::* cpe:2.3:a:f5:nginx:0.5.32:::::::* cpe:2.3:a:f5:nginx:0.5.31:::::::* cpe:2.3:a:f5:nginx:0.5.30:::::::* cpe:2.3:a:f5:nginx:0.5.3:::::::* cpe:2.3:a:f5:nginx:0.5.29:::::::* cpe:2.3:a:f5:nginx:0.5.28:::::::* cpe:2.3:a:f5:nginx:0.5.27:::::::* cpe:2.3:a:f5:nginx:0.5.26:::::::* cpe:2.3:a:f5:nginx:0.5.25:::::::* cpe:2.3:a:f5:nginx:0.5.24:::::::* cpe:2.3:a:f5:nginx:0.5.23:::::::* cpe:2.3:a:f5:nginx:0.5.22:::::::* cpe:2.3:a:f5:nginx:0.5.21:::::::* cpe:2.3:a:f5:nginx:0.5.20:::::::* cpe:2.3:a:f5:nginx:0.5.2:::::::* cpe:2.3:a:f5:nginx:0.5.19:::::::* cpe:2.3:a:f5:nginx:0.5.18:::::::* cpe:2.3:a:f5:nginx:0.5.17:::::::* cpe:2.3:a:f5:nginx:0.5.16:::::::* cpe:2.3:a:f5:nginx:0.5.15:::::::* cpe:2.3:a:f5:nginx:0.5.14:::::::* cpe:2.3:a:f5:nginx:0.5.13:::::::* cpe:2.3:a:f5:nginx:0.5.12:::::::* cpe:2.3:a:f5:nginx:0.5.11:::::::* cpe:2.3:a:f5:nginx:0.5.10:::::::* cpe:2.3:a:f5:nginx:0.5.1:::::::* cpe:2.3:a:f5:nginx:0.5.0:::::::* cpe:2.3:a:f5:nginx:0.4.9:::::::* cpe:2.3:a:f5:nginx:0.4.8:::::::* cpe:2.3:a:f5:nginx:0.4.7:::::::* cpe:2.3:a:f5:nginx:0.4.6:::::::* cpe:2.3:a:f5:nginx:0.4.5:::::::* cpe:2.3:a:f5:nginx:0.4.4:::::::* cpe:2.3:a:f5:nginx:0.4.3:::::::* cpe:2.3:a:f5:nginx:0.4.2:::::::* cpe:2.3:a:f5:nginx:0.4.14:::::::* cpe:2.3:a:f5:nginx:0.4.13:::::::* cpe:2.3:a:f5:nginx:0.4.12:::::::* cpe:2.3:a:f5:nginx:0.4.11:::::::* cpe:2.3:a:f5:nginx:0.4.10:::::::* cpe:2.3:a:f5:nginx:0.4.1:::::::* cpe:2.3:a:f5:nginx:0.4.0:::::::* cpe:2.3:a:f5:nginx:0.3.9:::::::* cpe:2.3:a:f5:nginx:0.3.8:::::::* cpe:2.3:a:f5:nginx:0.3.7:::::::* cpe:2.3:a:f5:nginx:0.3.61:::::::* cpe:2.3:a:f5:nginx:0.3.60:::::::* cpe:2.3:a:f5:nginx:0.3.6:::::::* cpe:2.3:a:f5:nginx:0.3.59:::::::* cpe:2.3:a:f5:nginx:0.3.58:::::::* cpe:2.3:a:f5:nginx:0.3.57:::::::* cpe:2.3:a:f5:nginx:0.3.56:::::::* cpe:2.3:a:f5:nginx:0.3.55:::::::* cpe:2.3:a:f5:nginx:0.3.54:::::::* cpe:2.3:a:f5:nginx:0.3.53:::::::* cpe:2.3:a:f5:nginx:0.3.52:::::::* cpe:2.3:a:f5:nginx:0.3.51:::::::* cpe:2.3:a:f5:nginx:0.3.50:::::::* cpe:2.3:a:f5:nginx:0.3.5:::::::* cpe:2.3:a:f5:nginx:0.3.49:::::::* cpe:2.3:a:f5:nginx:0.3.48:::::::* cpe:2.3:a:f5:nginx:0.3.47:::::::* cpe:2.3:a:f5:nginx:0.3.46:::::::* cpe:2.3:a:f5:nginx:0.3.45:::::::* cpe:2.3:a:f5:nginx:0.3.44:::::::* cpe:2.3:a:f5:nginx:0.3.43:::::::* cpe:2.3:a:f5:nginx:0.3.42:::::::* cpe:2.3:a:f5:nginx:0.3.41:::::::* cpe:2.3:a:f5:nginx:0.3.40:::::::* cpe:2.3:a:f5:nginx:0.3.4:::::::* cpe:2.3:a:f5:nginx:0.3.39:::::::* cpe:2.3:a:f5:nginx:0.3.38:::::::* cpe:2.3:a:f5:nginx:0.3.37:::::::* cpe:2.3:a:f5:nginx:0.3.36:::::::* cpe:2.3:a:f5:nginx:0.3.35:::::::* cpe:2.3:a:f5:nginx:0.3.34:::::::* cpe:2.3:a:f5:nginx:0.3.33:::::::* cpe:2.3:a:f5:nginx:0.3.32:::::::* cpe:2.3:a:f5:nginx:0.3.31:::::::* cpe:2.3:a:f5:nginx:0.3.30:::::::* cpe:2.3:a:f5:nginx:0.3.3:::::::* cpe:2.3:a:f5:nginx:0.3.29:::::::* cpe:2.3:a:f5:nginx:0.3.28:::::::* cpe:2.3:a:f5:nginx:0.3.27:::::::* cpe:2.3:a:f5:nginx:0.3.26:::::::* cpe:2.3:a:f5:nginx:0.3.25:::::::* cpe:2.3:a:f5:nginx:0.3.24:::::::* cpe:2.3:a:f5:nginx:0.3.23:::::::* cpe:2.3:a:f5:nginx:0.3.22:::::::*