SuSE 10 Security Update : X11 (ZYPP Patch Number 7416)

Remote attackers could execute arbitrary commands as root by assigning specially crafted hostnames to X11 clients via XDMCP. CVE-2011-0465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : postfix (ZYPP Patch Number 7502)

Remote attackers could have potentially exploited a memory corruption issue in postfix' SASL implementation to execute arbitrary code CVE-2011-1720. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 11.1 Security Update : pidgin, libpurple and finch (SAT Patch Number 5389)

This update fixes the following security issues : - 604225: MSN emoticon DoS. CVE-2010-1624 - 648273: multiple NULL pointer dereference weaknesses. CVE-2010-3711 - 722199: vulnerability in SILC protocol handling CVE-2011-3594 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7596)

Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...

SuSE 11.1 Security Update : Xorg X11 (SAT Patch Number 5103)

Specially crafted font files could cause a buffer overflow in applications that use libXfont to load such files. CVE-2011-2895 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itsel...

SuSE 10 Security Update : vino (ZYPP Patch Number 7531)

This security update fixes two out-of-bounds memory access vulnerabilities in vinos' libvncserver. CVE-2011-0904 / CVE-2011-0905 Additionally, another possible server crash has been fixed. bln440712 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 10 Security Update : evince (ZYPP Patch Number 7409)

This update of evince fixes a buffer overflow in linetoken. CVE-2011-0433 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid57185; scriptversion"1.6";...

SuSE 11.1 Security Update : libopenssl (SAT Patch Number 5160)

Server code for ECDH could have crashed if it received a specially crafted handshake message CVE-2011-3210. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 5413)

flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445 / CVE-2011-2450 / CVE-2011-2451 / CVE-2011-2452 / CVE-2011-2453 / CVE-2011-2454 / CVE-2011-2455 / CVE-2011-2456 / CVE-2011-2457 / CVE-2011-2458 / CVE-2011-2459 / CVE-2011-2460 %NASLMINLEVEL...

SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 7492)

Mozilla XULRunner 1.9.1 was updated to the 1.9.1.19 security release. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, a...

SuSE 10 Security Update : freetype2 (ZYPP Patch Number 7872)

This update of freetype2 fixes multiple security flaws that could allow attackers to cause a denial of service or to execute arbitrary code via specially crafted fonts. CVE-2011-3256 / CVE-2011-3439 / CVE-2011-2895 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

MS11-094: Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2639142)

The remote Windows host has a version of Microsoft PowerPoint that is affected by multiple vulnerabilities : - The application insecurely restricts the path used for loading external DLL files. This could lead to arbitrary code execution. CVE-2011-3396 - The application could cause memory to be...

SuSE 11.1 Security Update : xorg-x11-server (SAT Patch Number 5479)

This update fixes two security issues with the X server : - A local attacker could find out if a file exists by exploiting the way that Xorg creates its lock files. CVE-2011-4028 - A non-root local user could set the read permission for all users on any file or directory. CVE-2011-4029...

SuSE 10 Security Update : Xorg-X11 (ZYPP Patch Number 7759)

The following bug has been fixed : - Specially crafted font files could have caused a buffer overflow in applications that use libXfont to load such files. CVE-2011-2895 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : Apache (ZYPP Patch Number 7722)

This update fixes a remote denial of service bug memory exhaustion in the Apache 2 HTTP server, that could be triggered by remote attackers using multiple overlapping Request Ranges. CVE-2011-3192 It also fixes a bug, where the LimitRequestFieldsize config option into account when parsing headers...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 7553)

This update for PHP5 fixes the following security issues : - Input Validation in the ZIP extension and NumberFormatter. CWE-20, CVE-2011-0421 / CVE-2011-1470 / CVE-2011-1467 - Numeric Errors in the SHM support and ZIP extension. CWE-189, CVE-2011-1092 / CVE-2011-1471 - Buffer overflows in the...

SuSE 10 Security Update : nbd (ZYPP Patch Number 7450)

Nbd was updated to fix a buffer overflow in the mainloop function of nbd-server.c. This vulnerability can be exploited by remote attackers via long requests to execute arbitrary code. CVE-2011-0530: CVSS v2 Base Score: 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P: Buffer Errors CWE-119 %NASLMINLEVEL 70300 C...

SuSE 10 Security Update : flash-player (ZYPP Patch Number 7679)

The update to Flash-Player 10.3.188.5 fixes various security issues : - CVE-2011-2130: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2134: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2135: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P - CVE-2011-2136: CVSS v...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7490)

Mozilla Firefox was updated to the 3.6.17 security release. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we...

SuSE 10 Security Update : popt (ZYPP Patch Number 7792)

Specially crafted RPM packages could have caused memory corruption in rpm when verifying signatures CVE-2011-3378. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...