SuSE 10 Security Update : cairo (ZYPP Patch Number 5006)

This update fixes a regression that was caused by the previous security update. Several programs such as gedit didn't display some lines properly anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

Stack overflow

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

CVE-2008-0766

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager RPM 4.5.1.11 and earlier Elite and Select for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party...

CVE-2008-0766

CVE-2008-0766 affects Brooks Remote Print Manager (RPM) for Windows, specifically RpmSrvc.exe in RPM 4.5.1.11 and earlier (Elite and Select). The flaw is a stack-based buffer overflow triggered by a long filename in a "Receive data file" LPD command. This enables remote attackers to execute arbit...

Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11

Luigi Auriemma Application: RPM Remote Print Manager http://lpd.brooksnet.com Versions: = 4.5.1.11 tested both the Elite and Select versions the beta version 5.0.38.0 does NOT seem vulnerable Platforms: Windows Bug: unicode buffer-overflow Exploitation: remote Date: 11 Feb 2008 Author: Luigi...

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently...

RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow

source: https://www.securityfocus.com/bid/27742/info RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker may exploit this issue to execute...

[SECURITY] Fedora 8 Update: xine-lib-1.1.10-1.fc8

This package contains the Xine library. Xine is a free multimedia player. It can play back various media. It also decodes multimedia files from local disk drives, and displays multimedia streamed over the Internet. It interprets many of the most common multimedia formats available - and some of t...

Fedora 8 : bind-9.5.0-23.b1.fc8 (2008-0903)

CVE-2008-0122, libbind.so off-by-one buffer overflow, very low severity Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 7 : icu-3.6-20.fc7 (2008-1076)

CVE-2007-4770 & CVE-2007-4771 Flaws in icu regexp handling. Technical details can be found at http://sourceforge.net/mailarchive/message.php?msgname= d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%2540mail.gmail.com Note that Tenable Network Security has extracted the preceding description block...

Fedora 8 : clamav-0.92-6.fc8 (2008-0115)

Upstream clamav 0.92 fixes multiple security issues : - CVE-2007-6335 426210 - CVE-2007-6336 426343 - CVE-2007-6337 426344 Sendmail-specific parts moved to separate milter subpackage. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securit...

openSUSE 10 Security Update : krb5 (krb5-4851)

This update fixes multiple vulnerabilities in krb5. It's unlikely that those vulnerabilities can actually be exploited. CVE-2007-5894, CVE-2007-5902, CVE-2007-5971, CVE-2007-5972 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : net-snmp (net-snmp-4753)

This update of net-snmp fixes the following bugs : - default and configurable maximum number of varbinds returnable to a GETBULK request CVE-2007-5846 - crash when smux peers were configured with empty passwords - the UCD-SNMP-MIB::memCached.0 SNMP object was missing - the snmptrap command from t...

Fedora 7 : qt4-4.3.3-1.fc7 (2007-4354)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 8 : qt4-4.3.3-1.fc8 (2007-4285)

An update to the latest upstream release. Includes fix for security issue CVE-2007-5965 rhbz411751. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

Fedora 7 : bind-9.4.2-2.fc7 (2007-4658)

fixed address of L.ROOT-SERVERS.NET 411141 - CVE-2007-6283 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

MDKA-2007:133 : timezone

Updated timezone packages are being provided for older Mandriva Linux systems that do not contain the new Daylight Savings Time information for 2007 and later for certain time zones. These updated packages contain the new information. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

SuSE 10 Security Update : krb5-apps-servers (ZYPP Patch Number 3022)

When using the krb5 telnet daemon it was possible for remote attackers to override authentication mechanisms and gain root access to the machine by supplying a special username. This is tracked by the Mitre CVE ID CVE-2007-0956. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text...

SuSE 10 Security Update : gpg (ZYPP Patch Number 1959)

This update of gpg fixes an segmentation fault when using the--no-armor option. This failure leads to a denial-of-service attack and may be used execute arbitrary code. CVE-2006-3746 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : Tk (ZYPP Patch Number 4478)

This update fixes a buffer overflow that occurs while processing interlaced/animatedGIF images. CVE-2007-4851 This bug could be used to execute code remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc...