SUSE-SA:2005:070: ipsec-tools,freeswan,openswan

The remote host is missing the patch for the advisory SUSE-SA:2005:070 ipsec-tools,freeswan,openswan. Openswan, Freeswan and raccoon ipsec-tools have been updated to fix crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto. The ipsec-tools /...

susechfn.sh.txt

!/bin/sh Exploit for SuSE Linux 9.1,2,3/10.0, Desktop 1.0, UnitedLinux 1.0 and SuSE Linux Enterprise Server 8,9 'chfn' local root bug. by Hunger Advistory: http://lists.suse.com/archive/suse-security-announce/2005-Nov/0002.html hunger@suse: id uid=1000hunger gid=1000hunger groups=1000hunger...

SUSE-SA:2005:050: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:050 kernel. The Linux kernel was updated to fix the following security issues: - CVE-2005-2457: A problem in decompression of files on 'zisofs' filesystem was fixed. - CVE-2005-2458: A potential buffer overflow in the zlib...

SUSE-SA:2005:047: acroread

The remote host is missing the patch for the advisory SUSE-SA:2005:047 acroread. A buffer overflow was found in the core application plug-in for the Adobe Reader, that allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors. This is tracked by t...

CVE-2005-2500

Buffer overflow in the xdrxcodearray2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol...

CVE-2005-2500

CVE-2005-2500: A buffer overflow in the Linux kernel 2.6.12 code path (xdr_xcode_array2 in xdr.c) used by SuSE Linux Enterprise Server 9 can be triggered by crafted XDR data for the nfsacl protocol, potentially allowing remote denial of service and possibly arbitrary code execution. The vulnerabi...

SUSE-SA:2005:041: php/pear XML::RPC

The remote host is missing the patch for the advisory SUSE-SA:2005:041 php/pear XML::RPC. A bug in the PEAR::XMLRPC library allowed remote attackers to pass arbitrary PHP code to the eval function. The updated php packages fix the XML::RPC bug, however several third party PHP packages include a...

SUSE Security Announcement: zlib denial of service attack (SUSE-SA:2005:039)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: zlib Announcement ID: SUSE-SA:2005:039 Date: Wed, 06 Jul 2005 14:00:00 +0000 Affected Products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Open Enterprise Server Vulnerability Type: remote...

SUSE-SA:2005:022: kdelibs3

The remote host is missing the patch for the advisory SUSE-SA:2005:022 kdelibs3. Several vulnerabilities have been identified and fixed in the KDE desktop environment. - A buffer overflow via specially crafted PCX pictures was fixed. This could lead to a remote attacker being able to execute code...

CVE-2004-0887

SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges...

CVE-2004-0887

SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges...

CVE-2004-0887

SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges...

PT-2010-5666 · Suse +2 · Suse Linux Enterprise +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.39.4 btrfs-kmp-xen affected versions not specified btrfs-kmp-pae affected versions not specified kernel-desktop-devel affected versions not specified Description: The issue allows local users to...

PT-2006-7534 · Debian +3 · Debian +3

Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux affected versions not specified openSUSE affected versions not specified SUSE Linux Enterprise affected versions not specified Description: The issue involves multiple vulnerabilities in various packages of Debian GNU/Linux,...

PT-2010-5664 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise affected versions not specified Linux kernel versions prior to 2.6.36.2 Description: The issue involves multiple vulnerabilities in the Linux kernel and SUSE Linux Enterprise packages, including kernel-desktop-devel,...

PT-2008-6949 · Opensuse +3 · Kernel-Ppc64-Debugsource +16

Name of the Vulnerable Software and Affected Versions: openSUSE kernel-ppc64-extra affected versions not specified openSUSE kernel-pmac64 affected versions not specified openSUSE kernel-s390x affected versions not specified openSUSE kernel-s390x-debug affected versions not specified openSUSE...

PT-2008-6956 · Linux +2 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise kernel-default-base affected versions not specified openSUSE kernel-pseries64 affected versions not specified openSUSE kernel-s390-debug affected versions not specified openSUSE kernel-smp-debuginfo affected versions not...

PT-2011-5207 · Linux +3 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: openSUSE systemtap-runtime-debuginfo affected versions not specified openSUSE systemtap affected versions not specified openSUSE libvmtools0-debuginfo affected versions not specified openSUSE libvmtools-devel affected versions not specified...

PT-2013-6319 · Linux +4 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise kernel-pae-devel versions affected versions not specified SUSE Linux Enterprise kernel-xen-devel versions affected versions not specified SUSE Linux Enterprise gfs2-kmp-xen versions affected versions not specified SUSE...

PT-2009-6738

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise affected versions not specified Linux kernel versions prior to 2.6.19 Description The issue allows local users to gain privileges or cause a denial of service via vectors involving the MSG MORE flag and a UDP socket. This...