SA-2007-025 - Drupal core - Arbitrary code execution via installer.

The Drupal installer allows any visitor to provide credentials for a database when the site's own database is not reachable. This allows attackers to run arbitrary code on the site's server. An immediate workaround is the removal of the file install.php in the Drupal root directory. Versions...

openSUSE 10 Security Update : ktorrent (ktorrent-3057)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384,CVE-2007-1799. Another bug could be exploited to crash Ktorrent CVE-2007-1385. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

openSUSE 10 Security Update : bind (bind-3964)

The bind nameserver generated predicatable DNS query IDs. Remote attackers could use that to perform DNS poisoning attacks CVE-2007-2926. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : rsync (rsync-3996)

An off by one buffer overflow within the fname function has been fixed. CVE-2007-4091 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update rsync-3996. The text...

openSUSE 10 Security Update : seamonkey (seamonkey-2691)

This security update brings Mozilla SeaMonkey to version 1.1.1. http://www.mozilla.org/projects/security/known-vulnerabilities.html for more details. It includes fixes to the following security problems : - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs wer...

openSUSE 10 Security Update : krb5 (krb5-4191)

This update of krb5 fixes two bugs in kadmind that can be used to execute arbitrary code remotely. CVE-2007-3999, CVE-2007-4000 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update krb5-4191. The...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-3530)

This update of OpenOfficeorg fixes a heap-overflow in the RTF parser and additional non-security bugs. CVE-2007-0245 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update OpenOfficeorg-3530. The tex...

openSUSE 10 Security Update : hplip (hplip-4516)

The deamon 'hpssd' could be exploited by users to execute arbitrary commands as root. hpssd only runs on systems that have HP all-in-one devices configured. In the default configuration the problem is not remotely exploitable as hpssd only listens on local interfaces CVE-2007-5208. %NASLMINLEVEL...

openSUSE 10 Security Update : horde (horde-3089)

This udpate fixes a cross site scripting bug XSS in horde CVE-2007-1473. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update horde-3089. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-4319)

This update of OpenOfficeorg fixes a bug in TIFF parsing code that leads to a heap overflow. CVE-2007-2834 This bug can be exploited with user assistance to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : xine-lib (xine-lib-2488)

This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. CVE-2007-0017 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-3978)

This update fixes multiple bugs in php : - predictable generaton of an initialization vector IV in the mcrypt extension - additional cookie attributes could be injected via a session id - specially crafted files could cause integer overflows in gd and leverage them to at least crash gd based...

openSUSE 10 Security Update : gimp (gimp-3949)

The image editor GIMP was updated to fix a integer overflow in the handling of PSD files. By providing a crafted PSD file and tricking the user to open it an attacker could execute code. CVE-2007-2949 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

openSUSE 10 Security Update : freeradius (freeradius-3286)

A memory leak in the code for handling EAP-TTLS tunnels could be exploited by attackers to crash freeradius CVE-2007-2028. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update freeradius-3286. The...

openSUSE 10 Security Update : claws-mail (claws-mail-4495)

This update fixes a format string bug in the incputerror function. This bug is triggered when error messages from the POP3 server are displayed and can be exploited remotely to execute arbitrary code. CVE-2007-2958 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

openSUSE 10 Security Update : clamav (clamav-2632)

This update to ClamAV version 0.90 fixes various bugs : CVE-2007-0897: A filedescriptor leak in the handling of CAB files can lead to a denial of service attack against the clamd scanner daemon caused by remote attackers. CVE-2007-0898: A directory traversal in handling of MIME E-Mail headers cou...

openSUSE 10 Security Update : cups (cups-2527)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-3832)

The Sun JAVA JDK 1.5.0 was upgraded to release 12 to fix various bugs, including the following security bugs : CVE-2007-2788 / CVE-2007-3004: Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK, allows remote attackers to execute arbitrary code or cause a...

openSUSE 10 Security Update : flash-player (flash-player-3889)

The Adobe Flash Player was updated to version 7.0.70.0 on SUSE Linux 10.0 and to version 9.0.48.0 on SUSE Linux 10.1 and openSUSE 10.2 to fix several security problems : CVE-2007-3456: An input validation error has been identified in Flash Player 9.0.45.0 and earlier versions that could lead to t...

openSUSE 10 Security Update : libvorbis (libvorbis-3850)

An array boundary problem within libvorbis was fixed. CVE-2007-3106 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvorbis-3850. The text description of thi...