openSUSE 10 Security Update : libpng (libpng-3739)

Applications using libpng can crash if libpng is ask to process a grayscale image with a malformed bad CRC tRNS chunk. CVE-2007-2445 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libpng-3739...

openSUSE 10 Security Update : cups (cups-4044)

A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code CVE-2007-3387. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : kernel (kernel-3760)

This kernel update fixes the following security problems : - CVE-2007-1861: The nlfiblookup function in net/ipv4/fibfrontend.c allows attackers to cause a denial of service kernel panic via NETLINKFIBLOOKUP replies, which trigger infinite recursion and a stack overflow. - CVE-2007-1496:...

openSUSE 10 Security Update : file (file-3033)

An integer underflow within the ELF header parsing has been fixed which could lead to arbitrary code execution. CVE-2007-1536 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : samba (samba-2553)

A logic error in the deferred open code can lead to an infinite loop in Samba's smbd daemon CVE-2007-0452. In addition the following changes are included with these packages : - Move tdb utils to the client package. - Add version of the package subversion to Samba vendor version suffix. - Fix tim...

openSUSE 10 Security Update : open-iscsi (open-iscsi-4034)

This update fixes insecure privileges and credential verification with the iscsi daemon. CVE-2007-3099, CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update open-iscsi-4034. The text...

openSUSE 10 Security Update : xine-lib (xine-lib-2487)

This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. CVE-2007-0017 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : asterisk (asterisk-3977)

This update fixes multiple bugs in asterisk that allowed remote attackers to crash the asterisk server or even execute arbitrary code CVE-2007-3762, CVE-2007-3763, CVE-2007-3764. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : kvirc (kvirc-3953)

A bug in the IRC-URI parser allowed attackers to execute arbitrary commands by tricking a user into opening a specially crafted URI in kvirc CVE-2007-2951. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : libgtop (libgtop-2512)

This update fixes a buffer overflow in libgtop's glibtopgetprocmaps function. CVE-2007-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libgtop-2512. The text description of this plugin is...

openSUSE 10 Security Update : libexif5 (libexif5-3704)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

CVE-2007-5480

Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...

CVE-2007-5477

Cross-site scripting XSS vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter...

CVE-2007-5485

CVE-2007-5485 affects the mg2 1.0 module for KwsPHP. The vulnerability is a SQL injection in index.php via the album parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the connected documents; no specific exploit status or in-the-wild ...

CVE-2007-5484

The CVE-2007-5484 entry documents a directory traversal vulnerability in WWWISIS 7.1, specifically in wxis.exe, where an attacker can cause local file disclosure by supplying a .. (dot dot) in the IsisScript parameter to iah. The vulnerability affects WWWISIS 7.1; the exact vulnerable component i...

CVE-2007-5486

CVE-2007-5486 affects dotProject before version 2.1, where the Companies module does not properly enforce privileges. This allows remote attackers to access the Companies module via a crafted URL. The issue is a privilege-check vulnerability leading to unauthorized access (partial confidentiality...

CVE-2007-5485

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2007-5478

CVE-2007-5478 describes a cross-site scripting (XSS) defect in the Nabh Stringbeans Portal (sbportal) 3.2. The vulnerability allows remote attackers to inject arbitrary web script or HTML through the project_name parameter. The provided documents do not reveal details about the exact root cause b...

CVE-2007-5482

Affected product : Sun StorEdge/StorageTek 3510 FC Array. Vulnerability class : unspecified vulnerability in the FTP service. Component/firmware : FTP service on the array with firmware before 4.21. Impact : remote attackers with access to the Ethernet management interface can cause a denial of s...

CVE-2007-5487

CVE-2007-5487 describes a stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 that can be triggered by a crafted URL in an EXTM3U section of an .m3u file. The underlying cause is a stack-based overflow allowing user-assisted remote attackers to execute arbitrary code on affected sys...