20529 matches found
SuSE 10 Security Update : dhcp6 (ZYPP Patch Number 7465)
A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...
SuSE 10 Security Update : Gimp (ZYPP Patch Number 7776)
Specially crafted gif files could have caused an infinite loop or a heap-based buffer overflow in the gif decoder CVE-2011-2896. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
SuSE 10 Security Update : subversion (ZYPP Patch Number 7560)
Subversion was updated to fix several security issues : - The moddavsvn Apache HTTPD server module can be crashed though when asked to deliver baselined WebDAV resources. CVE-2011-1752 - The moddavsvn Apache HTTPD server module can trigger a loop which consumes all available memory on the system...
SuSE 10 Security Update : foomatic-filters (ZYPP Patch Number 7677)
The foomatic print filters of the hplip package contained a remote code execution vulnerability. Remote users, if allowed to access a print server such as CUPS, could execute arbitrary commands as lp system user. CVE-2011-2697: CVSS v2 Base Score: 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P: Input Validation...
SuSE 10 Security Update : opie (ZYPP Patch Number 7594)
This update fixes off-by-one errors in opiesu CVE-2011-2489 and missing setuid return value checks in opielogin. CVE-2011-2490 This update also removes the setuid bit from opiesu program. If you rely on the setuid bit on opiesu, add the following line to /etc/permissions.local : /usr/bin/opiesu...
SuSE 10 Security Update : Mozilla NSS (ZYPP Patch Number 7746)
This update updates Mozilla NSS to 3.12.11. The update marks the compromised DigiNotar Certificate Authority as untrusted For more information read: MFSA 2011-34 - update to 3.12.10 o root CA changes o filter certain bogus certs bmo642815 o fix minor memory leaks o other bugfixes - update to 3.12...
SuSE 10 Security Update : radvd (ZYPP Patch Number 7824)
This update of radvd fixes multiple buffer overread flaws in the processra function that could have potentially lead to crashes CVE-2011-3604. Additionally, a temporary Denial of Service flaw that could be triggered with a flood of NDROUTERSOLICIT has been fixed. CVE-2011-3605 %NASLMINLEVEL 70300...
SuSE 11.1 Security Update : puppet (SAT Patch Number 5421)
The following security issues have been fixed : - Puppet's certificate authority issued Puppet agent certificates capable of impersonating the Puppet master. Compromised or rogue puppet agents could therefore use their certificates for MITM attacks. CVE-2011-3872 Note: If you've set the...
SuSE 10 Security Update : rdesktop (ZYPP Patch Number 7525)
The following bug has been fixed : - A malicious server could access any file on clients connecting to it if the client shared some ressource. CVE-2011-1595 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7833)
Acrobat reader was updated to version 9.4.6 to fix several security issues. CVE-2011-1353 / CVE-2011-2431 / CVE-2011-2432 / CVE-2011-2433 / CVE-2011-2434 / CVE-2011-2435 / CVE-2011-2436 / CVE-2011-2437 / CVE-2011-2438 / CVE-2011-2439 / CVE-2011-2440 / CVE-2011-2441 / CVE-2011-2442 %NASLMINLEVEL...
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7862)
IBM Java 5 was updated to SR13, fixing various bugs and security issues. Security issues addressed are tracked by : CVE-2011-3545 / CVE-2011-3547 / CVE-2011-3548 / CVE-2011-3549 / CVE-2011-3552 / CVE-2011-3554 / CVE-2011-3557 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descripti...
SuSE 10 Security Update : nagios (ZYPP Patch Number 7625)
This update fixes and issue where statusmap.cgi was prone to a cross-site scripting XSS vulnerability. CVE-2011-1523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
SuSE 10 Security Update : IBM Java (ZYPP Patch Number 7650)
IBM Java 1.5.0 SR12 FP5 has been released fixing bugs and security issues. The following security issues were fixed : - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remo...
SuSE 10 Security Update : libgnomesu (ZYPP Patch Number 7580)
The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges. CVE-2011-1946 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
CVE-2011-4323
CVE-2011-4323 is a duplicate of CVE-2011-2726 (Drupal 7.x before 7.5). The connected data confirms an access bypass: non-privileged users can download a file attached to a comment if they know or guess the direct URL, even when the parent node is denied access, provided file upload fields or priv...
CVE-2011-1161
CVE-2011-1161 is rejected and not an active vulnerability entry.