Design/Logic Flaw

Use-after-free vulnerability in the AutoUpdate feature in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5, when an Embedded RealPlayer is used, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2011-2947

Cross-zone scripting vulnerability in the RealPlayer ActiveX control in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.0 through 14.0.5 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to inject arbitrary web script or HTML in the Local Zone via a local HTML document...

SuSE 11.1 Security Update : libpng (SAT Patch Number 4948)

This update of libpng12-0 fixes : - CVE-2008-6218: CVSS v2 Base Score: 7.1 AV:N/AC:M/Au:N/C:N/I:N/A:C: Resource Management Errors CWE-399 - unknown unknown. CVE-2009-5063: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P - CVE-2011-2501: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P: Desig...

SuSE 11.1 Security Update : ecryptfs-utils (SAT Patch Number 4956)

This update of ecryptfs-utils fixes several security problems : - Race condition when checking mountpoint during mount. CVE-2011-1831 - Race condition when checking mountpoint during unmount. CVE-2011-1832 - Race condition when checking source during mount. CVE-2011-1833 - Improper mtab handling...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4973)

The update to Flash-Player 10.3.188.5 fixes various security issues : - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v...

SuSE 11.1 Security Update : foomatic-filters (SAT Patch Number 4966)

The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. - CVE-2011-2697: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P : Input Validati...

SuSE 11.1 Security Update : libsoup (SAT Patch Number 4945)

This update of libsoup fixes a directory traversal attack that affect application using the library. CVE-2011-2524: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:P/I:N/A:N %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Su...

SuSE 11.1 Security Update : compat-openssl097g (SAT Patch Number 4913)

This update adds openssl patches since 2007 for : - CVE-2009-0590 - CVE-2008-5077 - CVE-2009-0789 - CVE-2009-3555 - CVE-2010-4180 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.1 Security Update : opie (SAT Patch Number 4815)

This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin. CVE-2011-2490 This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...

SuSE 11.1 Security Update : opie (SAT Patch Number 4815)

This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin. CVE-2011-2490 This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 4884 / 4888 / 4889)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.43 and fixes various bugs and security issues. The following security issues were fixed : - The normal mmap paths all avoid creating a mapping where the pgoff inside the mapping could wrap around due to overflow. However, an...

SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4875)

IBM Java 1.6.0 SR9-FP2 fixes several of bugs and thew following security issues : - An unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start...

SuSE 11.1 Security Update : KVM (SAT Patch Number 4814)

A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host. CVE-2011-2212 / CVE-2011-2512 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

SuSE 11.1 Security Update : coreutils (SAT Patch Number 4817)

This update fixes the following security issue : - 697897: coreutils: when running 'su -c' to execute commands as different user the target user could inject command back into the calling user's terminal via the TIOCSTI ioctl. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.1 Security Update : libapr (SAT Patch Number 4845)

This update fixes the following security issues : - 650435: remote DoS in APR. CVE-2010-1623 - 693778: unconstrained recursion when processing patterns CVE-2011-0419 / CVE-2011-1928 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : nagios (SAT Patch Number 4849)

statusmap.cgi was prone to a cross-site scripting XSS vulnerability. CVE-2011-1523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.1 Security Update : NFS (SAT Patch Number 4821)

When using wildcards in /etc/exports an attacker could gain unauthorized access to an NFS exported filesystem by creating a DNS record that resolves to the attacker's IP as well as to a trusted IP. CVE-2011-2500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.1 Security Update : bind (SAT Patch Number 4846)

A remote Denial of Service vulnerability has been fixed in bind. Specially crafted packets could cause bind servers recursive as well as authoritative to exit. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.1 Security Update : tftp (SAT Patch Number 4786)

Malicious clients could overflow a buffer in tftpd by specifying a large value for the utimeout option. CVE-2011-2199 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.1 Security Update : libgnomesu (SAT Patch Number 4805)

The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges. CVE-2011-1946 Note: this is just a re-release of the previous update to fix a regression unrelated to the security issue. %NASLMINLEVEL 70300 C Tenable Networ...