SuSE 11.3 Security Update : binutils (SAT Patch Number 10214)

binutils has been updated to fix eight security issues : - Lack of range checking leading to controlled write in bfdelfsetupsections. CVE-2014-8485 - Invalid read flaw in libbfd. CVE-2014-8484 - Write to uninitialized memory in the PE parser. CVE-2014-8501 - Crash in the PE parser. CVE-2014-8502 ...

SuSE 11.3 Security Update : vsftpd (SAT Patch Number 10161)

The vsftp daemon was not handling the 'denyfile' option properly, allowing unauthorized access in some specific scenarios.bnc900326. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10215)

Adobe Flash Player was updated to version 11.2.202.438 to fix one security issue. APSB15-02, CVE-2015-0310 For more details refer to the vendor advisory at http://helpx.adobe.com/security/products/flash-player/apsb15-02.html . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.3 Security Update : unzip (SAT Patch Number 10159)

This update fixes the following security issues : - heap overflow condition in the CRC32 verification. CVE-2014-8139 - write error 8349 shows a problem in extract.c:testcompreb. CVE-2014-8140 - read errors 6430, 3422 show problems in process.c:getZip64Data. CVE-2014-8141 %NASLMINLEVEL 70300 C...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10164)

Adobe Flash Player was updated to fix several vulnerabilities. More information can be found at http://helpx.adobe.com/security/products/flash-player/apsb15-01.html . %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Su...

SuSE 11.3 Security Update : xorg-x11-server (SAT Patch Number 10108)

The XOrg X11 server was updated to fix 12 security issues : - Denial of service due to unchecked malloc in client authentication. CVE-2014-8091 - Integer overflows calculating memory needs for requests. CVE-2014-8092 - Integer overflows calculating memory needs for requests in GLX extension...

SuSE 11.3 Security Update : bind (SAT Patch Number 10100)

bind has been updated to version 9.9.6P1, fixing the following security issue : - A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow default 7, and the number of...

SuSE 11.3 Security Update : suseRegister (SAT Patch Number 10008)

suseRegister was updated to fix one security issue : - POODLE: Ensure that only TLS is used. CVE-2014-3566 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SuSE 11.3 Security Update : Xen (SAT Patch Number 10018)

Xen has been updated to version 4.2.5 with additional patches to fix six security issues : - Guest effectable page reference leak in MMUMACHPHYSUPDATE handling. CVE-2014-9030 - Insufficient bounding of 'REP MOVS' to MMIO emulated inside the hypervisor. CVE-2014-8867 - Excessive checking in...

SuSE 11.3 Security Update : tcpdump (SAT Patch Number 10093)

tcpdump has been updated to fix two security issues : - Unreliable output using malformed AOVD payload. CVE-2014-8769. bnc905872 - Denial of service in verbose mode using malformed OLSR payload. CVE-2014-8767. bnc905870 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.3 Security Update : mailx (SAT Patch Number 10096)

This mailx update fixes the following security issues : - Shell command injection via crafted email addresses. CVE-2004-2771 / CVE-2014-7844. bnc909208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.3 Security Update : cpio (SAT Patch Number 10070)

This cpio update fixes the following security issue : - heap-based buffer overflow flaw in listfile CVE-2014-9112. bnc907456 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself ...

SuSE 11.3 Security Update : libksba (SAT Patch Number 10087)

This libksba update fixes the following security issue : - buffer overflow in ksbaoidtostr CVE-2014-9087. bnc907074 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.3 Security Update : flash-player (SAT Patch Number 10090)

This flash-player security update fixes the following issues : - Security update to 11.2.202.425 bnc909219 : - APSB14-27, CVE-2014-0580 / CVE-2014-0587 / CVE-2014-8443 / CVE-2014-9162 / CVE-2014-9163 / CVE-2014-9164 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 10064)

Mozilla Firefox has been updated to the 31.3ESR release fixing bugs and security issues. - Mozilla developers and community identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corrupti...

SuSE 11.3 Security Update : pidgin (SAT Patch Number 10078)

This pidgin update fixes the following security issues : - remote information leak via crafted XMPP message. CVE-2014-3698. bnc902408 - denial of service parsing Groupwise server message. CVE-2014-3696. bnc902410 - crash in MXit protocol plug-in CVE-2014-3695. bnc902409 %NASLMINLEVEL 70300 C...

CVE-2014-8270

BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset...

Design/Logic Flaw

BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset...

CVE-2014-8270

BMC Track-It! 11.3 allows remote attackers to gain privileges and execute arbitrary code by creating an account whose name matches that of a local system account, then performing a password reset...

BMC TrackIt! Unauthenticated Arbitrary User Password Change

This module exploits a flaw in the password reset mechanism in BMC TrackIt! 11.3 and possibly prior versions. If the password reset service is configured to use a domain administrator which is the recommended configuration, then domain credentials can be reset such as domain Administrator. Module...