New VA Modules: NSE: 1, OpenVAS: 14, MSF: 3, Nessus: 11

[New VA Module Alert Service <postmaster () insecure org>]

This report describes any new scripts/modules/exploits added to Nmap,
OpenVAS, Metasploit, and Nessus since yesterday.

== Nmap Scripting Engine scripts (1) ==

r28309 http-drupal-users-enum http://nmap.org/nsedoc/scripts/http-drupal-users-enum.html
Enumerates Drupal users by exploiting a an information disclosure
vulnerability in Views, Drupal's most popular module.

== OpenVAS plugins (14) ==

r13098 802425 gb_apache_struts_showcase_java_method_exec_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_apache_struts_showcase_java_method_exec_vuln.nasl?root=openvas&view=markup
Apache Struts2 Showcase Arbitrary Java Method Execution vulnerability

r13098 802813 gb_apple_safari_webkit_mult_vuln_mar12_macosx.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_apple_safari_webkit_mult_vuln_mar12_macosx.nasl?root=openvas&view=markup
Apple Safari Webkit Multiple Vulnerabilities - March12 (Mac OS X)

r13098 802391 gb_twiki_organization_xss_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_twiki_organization_xss_vuln.nasl?root=openvas&view=markup
TWiki 'organization' Cross-Site Scripting Vulnerability

r13098 802718 gb_google_chrome_history_navigation_code_exec_vuln_lin.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_google_chrome_history_navigation_code_exec_vuln_lin.nasl?root=openvas&view=markup
Google Chrome 'History navigation' Arbitrary Code Execution
Vulnerability (Linux)

r13098 802814 gb_apple_safari_webkit_mult_vuln_mar12_win.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_apple_safari_webkit_mult_vuln_mar12_win.nasl?root=openvas&view=markup
Apple Safari Webkit Multiple Vulnerabilities - March12 (Win)

r13098 802708 gb_ms_ie_code_exec_n_dos_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ms_ie_code_exec_n_dos_vuln.nasl?root=openvas&view=markup
Microsoft Internet Explorer Code Execution and DoS Vulnerabilities

r13098 802719 gb_google_chrome_history_navigation_code_exec_vuln_macosx.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_google_chrome_history_navigation_code_exec_vuln_macosx.nasl?root=openvas&view=markup
Google Chrome 'History navigation' Arbitrary Code Execution
Vulnerability (MAC OS X)

r13098 802619 gb_tversity_dir_trav_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_tversity_dir_trav_vuln.nasl?root=openvas&view=markup
TVersity Directory Traversal Vulnerability

r13098 802717 gb_google_chrome_history_navigation_code_exec_vuln_win.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_google_chrome_history_navigation_code_exec_vuln_win.nasl?root=openvas&view=markup
Google Chrome 'History navigation' Arbitrary Code Execution
Vulnerability (Windows)

r13098 802715 gb_google_chrome_gpu_mult_vuln_lin.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_google_chrome_gpu_mult_vuln_lin.nasl?root=openvas&view=markup
Google Chrome 'GPU process' Multiple Vulnerabilities (Linux)

r13098 802817 gb_sockso_dir_trav_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_sockso_dir_trav_vuln.nasl?root=openvas&view=markup
Sockso Directory Traversal Vulnerability

r13098 802713 gb_pidgin_mult_dos_vuln_win.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_pidgin_mult_dos_vuln_win.nasl?root=openvas&view=markup
Pidgin Multiple Denial of Service Vulnerabilities (Windows)

r13098 802716 gb_google_chrome_gpu_mult_vuln_macosx.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_google_chrome_gpu_mult_vuln_macosx.nasl?root=openvas&view=markup
Google Chrome 'GPU process' Multiple Vulnerabilities (MAC OS X)

r13098 802714 gb_google_chrome_gpu_mult_vuln_win.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_google_chrome_gpu_mult_vuln_win.nasl?root=openvas&view=markup
Google Chrome 'GPU process' Multiple Vulnerabilities (Windows)

== Metasploit modules (3) ==

r14993 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/gather/enum_bing_url.rb
Bing URL Enumerator

r14995 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/gather/enum_dns.rb
DNS Enumeration Module

r14996 
http://metasploit.com/redmine/projects/framework/repository/entry/modules/post/osx/gather/enum_chicken_vnc_profile.rb
OSX Gather Chicken of the VNC Profile

== Nessus plugins (11) ==

58408 suse_bytefx-data-mysql-8001.nasl
http://nessus.org/plugins/index.php?view=single&id=58408
SuSE Security Update: Security update for Mono (bytefx-data-mysql-8001)

58407 redhat-RHSA-2012-0407.nasl
http://nessus.org/plugins/index.php?view=single&id=58407
RHSA-2012-0407: libpng

58406 fedora_2012-3549.nasl
http://nessus.org/plugins/index.php?view=single&id=58406
Fedora 15 2012-3549

58405 fedora_2012-3537.nasl
http://nessus.org/plugins/index.php?view=single&id=58405
Fedora 16 2012-3537

58404 centos_RHSA-2012-0407.nasl
http://nessus.org/plugins/index.php?view=single&id=58404
CentOS : RHSA-2012-0407

58403 centos_RHSA-2012-0397.nasl
http://nessus.org/plugins/index.php?view=single&id=58403
CentOS : RHSA-2012-0397

58402 groupwise_client_address_book_rce.nasl
http://nessus.org/plugins/index.php?view=single&id=58402
Novell GroupWise Client Address Book File Handling Email Address Field
Remote Overflow

58401 groupwise_client_installed.nasl
http://nessus.org/plugins/index.php?view=single&id=58401
Novell GroupWise Client Installed

58400 jdwp_detect.nasl
http://nessus.org/plugins/index.php?view=single&id=58400
Java Debug Wire Protocol Detection

58399 hp_data_protector_exp_hpsbmu02746.nasl
http://nessus.org/plugins/index.php?view=single&id=58399
HP Data Protector Express 5.x < 5.0.0 Build 59287 / 6.x < 6.0.0 Build
11974 Multiple Vulnerabilities

58398 hp_data_protector_exp_installed.nasl
http://nessus.org/plugins/index.php?view=single&id=58398
HP Data Protector Express Installed
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/