MDVA-2009:146 : coreutils

There is no man page for the su command. This update fixes this problem making the man page for the su command show again. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDVA-2009:144 : libv4l

This update addresses the issue of urpmi preventing installation of both i586/x8664 versions of libv4l wrappers Mandriva bug 45316. Updated packages are provided to fix this issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security...

Fedora 11 : apr-1.3.8-1.fc11 (2009-8336)

CVE-2009-2412: allocator alignment fixes Full details here: http://www.apache.org/dist/apr/patches/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Mandriva Linux Security Advisory : apache-mod_auth_mysql (MDVSA-2009:189-1)

A vulnerability has been found and corrected in modauthmysql : SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x allows remote attackers to execute arbitrary SQL commands via multibyte character encodings for...

Critical: Red Hat Security Advisory: nspr and nss security and bug fix update

Updated nspr and nss packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Netscape Portable Runtime NSPR provides platform...

openSUSE Security Update : bind (bind-1146)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured CVE-2009-0696. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandriva 'initscripts'本地信息泄漏漏洞

Bugraq ID: 35854 Mandriva是一款基于linux内核的发行版本。 Mandriva 'initscripts'存在安全问题，本地攻击者可以利用漏洞获得敏感信息。 在使用'initscripts'脚本启动服务时，如执行service network restart，会记录部分敏感信息，如部分无线密钥的部分数据。 MandrakeSoft Linux Mandrake 2009.1 x8664 MandrakeSoft Linux Mandrake 2009.1 MandrakeSoft Linux Mandrake 2009.0 x8664 MandrakeSoft...

Fedora Core 11 FEDORA-2009-7498 (mumbles)

The remote host is missing an update to mumbles announced via advisory FEDORA-2009-7498. OpenVAS Vulnerability Test $Id: fcore20097498.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7498 mumbles Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-7423 (openswan)

The remote host is missing an update to openswan announced via advisory FEDORA-2009-7423. OpenVAS Vulnerability Test $Id: fcore20097423.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7423 openswan Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:156 (net-snmp)

The remote host is missing an update to net-snmp announced via advisory MDVSA-2009:156. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora 10 : bugzilla-3.2.4-1.fc10 (2009-7669)

New upstream version fixing Unauthorized Bug Change flaw: http://www.bugzilla.org/security/3.2.3/ https://bugzilla.mozilla.org/showbug.cgi?id=495257 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

openSUSE Security Update : ntp (ntp-439)

This update of ntp improves a check for the return value of openssl's function EVPVerifyFinal. CVE-2009-0021 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ntp-439. The text description of th...

openSUSE Security Update : kdepim3 (kdepim3-770)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...

openSUSE Security Update : kernel (kernel-111)

The openSUSE 11.0 kernel was updated to 2.6.25.11. It fixes following security problems: CVE-2008-2812: Various tty / serial devices did not check functionpointers for NULL before calling them, leading to potential crashes or code execution. The devices affected are usually only accessible by the...

openSUSE Security Update : kernel (kernel-932)

This Linux kernel update for openSUSE 11.1 fixes lots of bugs and some security issues. The kernel was also updated to the 2.6.27.23 stable release. Following security issues have been fixed: CVE-2009-1439: Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows...

openSUSE Security Update : opera (opera-160)

This is a version upgrade for opera to version 9.52 to fix possible security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-160. The text description of this plugin is ...

openSUSE Security Update : ntp (ntp-439)

This update of ntp improves a check for the return value of openssl's function EVPVerifyFinal. CVE-2009-0021 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ntp-439. The text description of th...

openSUSE Security Update : postfix (postfix-133)

A local privilege escalation vulnerability as well as a mailbox ownership problem has been fixed in postfix. CVE-2008-2936 and CVE-2008-2937 have been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

openSUSE Security Update : ghostscript-devel (ghostscript-devel-592)

Integer overflows and missing upper bounds checks in Ghostscript's ICC library potentially allowed attackers to crash Ghostscript or even cause execution of arbitrary code via specially crafted PS or PDF files CVE-2009-0583, CVE-2009-0584. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : mediawiki (mediawiki-506)

Missing checks allowed remote attackers to conduct cross-site scripting XSS or cross-site request forgery CSRF attacks against MediaWiki CVE-2008-5250, CVE-2008-5252. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...