openSUSE 10 Security Update : pulseaudio (pulseaudio-3637)

This update of pulseaudio fixes a denial-of-service bug that can be triggered remotely. CVE-2007-1804 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update pulseaudio-3637. The text description of...

openSUSE 10 Security Update : kdegraphics3-pdf (kdegraphics3-pdf-3972)

A buffer overflow in the xpdf code contained in kpdf could be exploited by attackers to potentially execute arbitrary code CVE-2007-3387. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : xorg-x11-server (xorg-x11-server-3082)

Integer overflows in the XC-MISC extension of the X-server could potentially be exploited to execute code with root privileges CVE-2007-1003. Integer overflows in libX11 could cause crashes CVE-2007-1667. Integer overflows in the font handling of the X-server could potentially be exploited to...

openSUSE 10 Security Update : pdftohtml (pdftohtml-2475)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE 10 Security Update : krb5-apps-servers (krb5-apps-servers-3021)

When using the krb5 telnet daemon it was possible for remote attackers to override authentication mechanisms and gain root access to the machine by supplying a special username. This is tracked by the Mitre CVE ID CVE-2007-0956. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

openSUSE 10 Security Update : asterisk (asterisk-3543)

This update fixes multiple bugs that allowed attackers to remotely crash asterisk or cause an information leak CVE-2007-1561, CVE-2007-1594, CVE-2007-1595, CVE-2007-2297, CVE-2007-2488. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

openSUSE 10 Security Update : ImageMagick (ImageMagick-3743)

This update of ImageMagick fixes a bug in the patch for the last security update for CVE-2007-1797. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ImageMagick-3743. The text description of th...

openSUSE 10 Security Update : libexif5 (libexif5-3704)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

openSUSE 10 Security Update : libgtop (libgtop-2512)

This update fixes a buffer overflow in libgtop's glibtopgetprocmaps function. CVE-2007-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libgtop-2512. The text description of this plugin is...

openSUSE 10 Security Update : opera (opera-4172)

This update of opera fixes a security vulnerabilities that allowed the execution of arbitrary code by using JavaScript. CVE-2007-4367 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-4172...

openSUSE 10 Security Update : kvirc (kvirc-3953)

A bug in the IRC-URI parser allowed attackers to execute arbitrary commands by tricking a user into opening a specially crafted URI in kvirc CVE-2007-2951. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : lighttpd (lighttpd-3090)

Two remotely exploitable DoS vulnerabilities in lighttpd can be used to crash lighttpd or make it waste CPU time in an enless loop CVE-2007-1869, CVE-2007-1870. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : neon (neon-2476)

Fix for incorrect array index handling with non-ASCII characters in the URI parser. CVE-2007-0157 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update neon-2476. The text description of this plugin...

openSUSE 10 Security Update : kernel (kernel-3760)

This kernel update fixes the following security problems : - CVE-2007-1861: The nlfiblookup function in net/ipv4/fibfrontend.c allows attackers to cause a denial of service kernel panic via NETLINKFIBLOOKUP replies, which trigger infinite recursion and a stack overflow. - CVE-2007-1496:...

openSUSE 10 Security Update : kernel (kernel-2705)

This kernel update fixes the following security problems : - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges 222656 - CVE-2006-6106: Multiple buffer...

openSUSE 10 Security Update : gnash (gnash-3447)

This update fixes a denial of service problem in the free flash player gnash. CVE-2007-2500 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update gnash-3447. The text description of this plugin is C...

openSUSE 10 Security Update : file (file-3033)

An integer underflow within the ELF header parsing has been fixed which could lead to arbitrary code execution. CVE-2007-1536 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : tcpdump (tcpdump-4036)

This update fixes a buffer overlow that could be triggered when displaying BGP packets CVE-2007-3798. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tcpdump-4036. The text description of this...

openSUSE 10 Security Update : mysql (mysql-4375)

This update provides fixes for : - CVE-2007-3780: remote triggerable crash - CVE-2007-3781: query tables without propper authorisation - CVE-2007-3782: gain update privileges without propper authorisation %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE 10 Security Update : tk (tk-4480)

This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...