SuSE 11.1 Security Update : glibc (SAT Patch Number 4572)

This update fixes the following security issues found in glibc : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Unprivileged users could read the NIS shadow database...

SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 5381)

NetworkManager did not pin a certificate's subject to an ESSID. A rogue access point could therefore be used to conduct MITM attacks by using any other valid certificate issued by same CA as used in the original network CVE-2006-7246. This has been fixed. Please note that existing WPA2 Enterprise...

SuSE 11.1 Security Update : Qt (SAT Patch Number 5131)

The following security issues have been fixed : - Specially crafted font files could cause a single byte heap based buffer overflow. CVE-2011-3193 - Specially crafted grey scale images could cause a heap-based buffer overflow. CVE-2011-3194 - SSL servers could run into an endless loop CVE-2010-26...

SuSE 11.1 Security Update : popt (SAT Patch Number 5256)

Specially crafted RPM packages could have caused memory corruption in rpm when verifying signatures CVE-2011-3378. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 5184)

This update resolves - a universal cross-site scripting issue that could be used to take actions on a user's behalf on any website or webmail provider if the user visits a malicious website. CVE-2011-2444 Note: There are reports that this issue is being exploited in the wild in active targeted...

SuSE 11.1 Security Update : puppet (SAT Patch Number 5421)

The following security issues have been fixed : - Puppet's certificate authority issued Puppet agent certificates capable of impersonating the Puppet master. Compromised or rogue puppet agents could therefore use their certificates for MITM attacks. CVE-2011-3872 Note: If you've set the...

SuSE 11.1 Security Update : Apache2 (SAT Patch Number 5482)

This update fixes several security issues in the Apache2 webserver. - This update also includes several fixes for a modproxy reverse exposure via RewriteRule or ProxyPassMatch directives. CVE-2011-3639 / CVE-2011-3368 / CVE-2011-4317 - Fixed the SSL renegotiation DoS by disabling renegotiation by...

SuSE 11.1 Security Update : openswan (SAT Patch Number 5424)

openswan's crypto helper was prone to an use-after-free flaw which could potentially allow remote attackers to cause a Denial of Service CVE-2011-4073, bnc727002. Additionally, the following issues have been fixed : - AH handshake problems bnc713986, - potential dereference of no longer valid...

SuSE 11.1 Security Update : pam (SAT Patch Number 5342)

The pamenv module is vulnerable to a stack overflow CVE-2011-3148 and a DoS condition CVE-2011-3149 when parsing users .pamenvironment files. Additionally a missing return value check inside pamxauth has been fixed. CVE-2010-3316 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptiv...

SuSE 11.1 Security Update : jasper (SAT Patch Number 5523)

The following issue has been fixed : - Specially crafted JPEG2000 files could cause a heap buffer overflow in jasper CVE-2011-4516 / CVE-2011-4517 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : Novell XTier framework (SAT Patch Number 5198)

Several user-supplied header length variables for the HTTP server component in the Novell XTier framework were not size limited, allowing integer overflow attacks to crash the service or potentially execute code. CVE-2011-1710 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.1 Security Update : pidgin, libpurple and finch (SAT Patch Number 5389)

This update fixes the following security issues : - 604225: MSN emoticon DoS. CVE-2010-1624 - 648273: multiple NULL pointer dereference weaknesses. CVE-2010-3711 - 722199: vulnerability in SILC protocol handling CVE-2011-3594 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 11.1 Security Update : update-test-security (2011-11-18) (deprecated)

This is a fake security update for testing purposes. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. @DEPRECATED@ This script has been deprecated as the associated patch is not actually a security fix. Disabled on 2013/12/05...

SuSE 11.1 Security Update : yast2-core (SAT Patch Number 5078)

This update of yast2-core fixes security issues and a bug : - When setting a password for a user, use blowfish algorithm id 2y instead of 2a. bnc700876 / CVE-2011-2483 - Log YCP client arguments only with y2debug, not to reveal AutoYaST passwords. bnc492746 - ini-agent: Fixed a test failure 'wron...

RealNetworks RealPlayer Multiple Vulnerabilities (Windows) - Aug11

This host is installed with RealPlayer which is prone to multiple vulnerabilities OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnwin01aug11.nasl 7015 2017-08-28 11:51:24Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Windows - Aug11 Authors: Rachana Shetty Copyright: Copyrigh...

SuSE 11.1 Security Update : vpnc (SAT Patch Number 5027)

This update of vpnc fixes a flaw in the modifyresolvconfsuse script that could potentially allow remote attackers to inject commands through specially crafted DNS domains. CVE-2011-2660 Also a rekeying during reconnect was improved. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11.1 Security Update : IBM Java (SAT Patch Number 5014)

IBM Java 1.4.2 SR 13 Fixpack 10 has been released and fixes various bugs and security issues. The following security issues have been fixed : - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231...

SuSE 11.1 Security Update : hplip (SAT Patch Number 4989)

This update of hplip fixes : - This patch originally affected foomatic-rip in CUPS but was found to be in foomatic-rip-hplip too. CVE-2004-0801: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P - The foomatic print filters of the hplip package contained a remote code execution vulnerability...

SuSE 11.1 Security Update : Xen (SAT Patch Number 4977)

Security / Collective Update for Xen Xen : - VUL-0: xen: VT-d PCI passthrough MSI trap injection. CVE-2011-1898. bnc702025 - update block-npiv scripts to support BFA HBA. bnc703924 - L3: Live migrations fail when guest crashes: domaincrashsync called from entry.S. bnc689954 - Bridge hangs cause...

SuSE 11.1 Security Update : ClamAV (SAT Patch Number 4942)

New clamav packages fix an off-by-one vulnerability which could lead to a DoS condition. CVE-2011-2721 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...