openSUSE 10 Security Update : hugin (hugin-4518)

This update of hugin disabled the usage of a temporary file. CVE-2007-5200 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update hugin-4518. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : xpdf-tools (xpdf-tools-2472)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE 10 Security Update : krb5 (krb5-4248)

This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 and CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-3990)

Multiple bugs in phpMyAdmin could lead to cross-site-scripting XSS attacks, injection of JavaScript code or to crashing the php interpreter. CVE-2007-1325,PMASA-2007-1,PMASA-2007-2,PMASA-2007-3,PMASA- 2007-4 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-2699)

This update brings Mozilla Firefox to security update version 1.5.0.10. - MFSA 2007-01: As part of the Firefox 2.0.0.2 and 1.5.0.10 update releases several bugs were fixed to improve the stability of the browser. Some of these were crashes that showed evidence of memory corruption and we presume...

openSUSE 10 Security Update : kernel (kernel-3128)

This kernel update fixes the following security problems : - CVE-2007-1000 A NULL pointer dereference in the IPv6 sockopt handling can be used by local attackers to read arbitrary kernel memory and so gain access to private information. - CVE-2007-1388 A NULL pointer dereference could be used by...

openSUSE 10 Security Update : ktorrent (ktorrent-3057)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384,CVE-2007-1799. Another bug could be exploited to crash Ktorrent CVE-2007-1385. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

Solaris 9 (sparc) : 123396-01

SunOS 5.9: librpcsvc patch. Date this patch was last updated by Sun : Oct/10/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openSUSE 10 Security Update : qt (qt-3050)

qt wrongly accepts overly long UTF-8 sequences due to a bug in the UTF-8 decoder. This may lead to security problems unter certain circumstances. The bug for example allows for script tag injection in konqueror CVE-2007-0242. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

openSUSE 10 Security Update : libexif (libexif-3718)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

openSUSE 10 Security Update : xmms (xmms-3073)

Two integer overflows when processing BMP skin images potentially allows attackers to execute arbitrary code via specially crafted files CVE-2007-0653,CVE-2007-0654. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE 10 Security Update : evolution-data-server (evolution-data-server-3825)

A malicious IMAP server could execute code within evolution by sending a malformed response to a SEQUENCE command. CVE-2007-3257 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : qt3 (qt3-3899)

Format string bugs in QTextEdit can be exploited via specially crafted HTML tags to potentially execute code CVE-2007-3388. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update qt3-3899. The text...

openSUSE 10 Security Update : star (star-4173)

This update fixes a directory traversal bug in star. CVE-2007-4131 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update star-4173. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : gpg (gpg-2995)

When printing a text stream with a GPG signature it was possible for an attacker to create a stream with 'unsigned text, signed text' where both unsigned and signed text would be shown without distinction which one was signed and which part wasn't. This is tracked by the Mitre CVE ID CVE-2007-126...

openSUSE 10 Security Update : id3lib (id3lib-4316)

This update fixes a bug that allows local attackers to overwrite arbitrary files. CVE-2007-4460 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update id3lib-4316. The text description of this plugin...

openSUSE 10 Security Update : tomcat5 (tomcat5-3950)

Certain characters of the URL were not properly filtered. This allowed directory reverse traversal attacks to access the web-root of tomcat. CVE-2007-0450 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : seamonkey (seamonkey-3632)

This update brings Mozilla SeaMonkey to security update version 1.1.2 - MFSA 2007-17 / CVE-2007-2871 : Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome such a...

openSUSE 10 Security Update : unrar (unrar-2996)

This update fixes a stack-absed buffer overflow in unrar that can be exploited with user-assistence by sending a password-protected archive. CVE-2007-0855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : gnomemeeting (gnomemeeting-3162)

This update fixes format string problems in gnomemeeting. CVE-2007-1007 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnomemeeting-3162. The text description of this plugin is C SUSE LLC...