SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4804)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

SuSE 11.1 Security Update : webkit (SAT Patch Number 4765)

Webkit version 1.2.7 fixes several security issues. CVE-2010-2441 / CVE-2010-2901 / CVE-2010-4042 / CVE-2010-4492 / CVE-2010-4493 / CVE-2010-4578 / CVE-2011-0482 / CVE-2011-0778 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : glibc (SAT Patch Number 4572)

This update fixes the following security issues found in glibc : - Specially crafted input to the fnmatch function could cause an integer overflow. CVE-2011-1071 - The output of the 'locale' command was not properly quoted. CVE-2011-1095 - Unprivileged users could read the NIS shadow database...

SuSE 11.1 Security Update : libgnomesu (SAT Patch Number 4735)

The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges. CVE-2011-1946 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : PHP5 (SAT Patch Number 4663)

This PHP5 update fixes : - CVE-2011-0421: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:N/A:P: Input Validation CWE-20 - CVE-2011-1092: CVSS v2 Base Score: 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P: Numeric Errors CWE-189 - CVE-2011-1148: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P: Resource Managemen...

SuSE 11.1 Security Update : ConsoleKit (SAT Patch Number 4613)

Remote users logged in via e.g. ssh could open a consolekit session that is considered local and therefore gain additional privileges, e.g. via policykit. CVE-2010-4664 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4715)

A critical vulnerability has been identified in Adobe Flash Player 10.3.181.23 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 10.3.185.23 and earlier versions for Android. This memory corruption vulnerability CVE-2011-2110 could cause a crash and potentiall...

SuSE 11.1 Security Update : Sun/Oracle Java (SAT Patch Number 4698)

Oracle Java 6 Update 26 fixes several security vulnerabilities. Please refer to Oracle's site for further information: http://www.oracle.com/technetwork/topics/security/javacpujune2011-3133 39.html %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

SuSE 11.1 Security Update : vino (SAT Patch Number 4575)

This security update fixes two out-of-bounds memory access vulnerabilities in vinos' libvncserver. CVE-2011-0904 / CVE-2011-0905 Additionally, another possible server crash has been fixed. bln440712 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in th...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4666)

This update of flash player fixes a cross-site scripting vulnerability CVE-2011-2107. For further details please refer to http://www.adobe.com/support/security/bulletins/apsb11-13.html . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

SuSE 11.1 Security Update : wireshark (SAT Patch Number 4476)

This update to wireshark version 1.4.5 fixes the following security issues : - Resource Management Errors. CWE-399, CVE-2011-1590 - Buffer Errors. CWE-119, CVE-2011-1591 - Numeric Errors CWE-189, CVE-2011-1592 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.1 Security Update : gimp (SAT Patch Number 4631)

A number of heap-based buffer overflows have been found in The Gimp affecting the PCX CVE-2011-1178, SGI, GBR and PAT CVE-2011-1782 plugins. The update fixes these security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : Xen (SAT Patch Number 4491)

Collective May/2011 update for Xen Xen : - 679344: Xen: multi-vCPU pv guest may crash host - 675817: Kernel panic when creating HVM guests on AMD platforms with XSAVE - 678871: dom0 hangs long time when starting hvm guests with memory = 64GB - 675363: Random lockups with kernel-xen. Possibly...

SuSE 11.1 Security Update : perl-libwww-perl (SAT Patch Number 4603)

This update fixes the issue that perl-libwww-perl does not enable host name verification of SSL certificates by default. This vulnerability could be exploited by a man in the middle attack. CVE-2011-0633 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks ...

SuSE 11.1 Security Update : kdelibs4 (SAT Patch Number 4407)

This update fixes a cross-site scripting XSS vulnerability in the way KHTML handles error pages. CVE-2011-1168 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SuSE 11.1 Security Update : pure-ftpd (SAT Patch Number 4360)

Pure-ftpd is vulnerable to the STARTTLS command injection issue similar to CVE-2011-0411 of postfix. CVE-2011-1575 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : kvm (SAT Patch Number 4574)

The following bugs have been fixed : - By causing a hot-unplug of the pci-isa bridge from within guests the qemu process could access already freed memory. A privileged user inside the guest could exploit that to crash the guest instance or potentially execute arbitrary code on the host...

HP SiteScope Cross Site Scripting and HTML Injection Vulnerabilities

HP SiteScope is prone to cross site scripting and HTML injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SuSE 11.1 Security Update : IBM Java (SAT Patch Number 4481)

IBM Java 1.4.2 was updated to SR13 FP9, fixing bugs and security issues. More information can be found on the IBM JDK Alerts page : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : aaa_base (SAT Patch Number 3910)

The following bug has been fixed : - The boot.localfs init script wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. CVE-2011-0461 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...