Critical: Red Hat Security Advisory: nspr and nss security and bug fix update

Updated nspr and nss packages that fix security issues and bugs are now available for Red Hat Enterprise Linux 4.7 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Netscape Portable Runtime NSPR provides platform...

openSUSE Security Update : bind (bind-1146)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured CVE-2009-0696. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Mandriva 'initscripts'本地信息泄漏漏洞

Bugraq ID: 35854 Mandriva是一款基于linux内核的发行版本。 Mandriva 'initscripts'存在安全问题，本地攻击者可以利用漏洞获得敏感信息。 在使用'initscripts'脚本启动服务时，如执行service network restart，会记录部分敏感信息，如部分无线密钥的部分数据。 MandrakeSoft Linux Mandrake 2009.1 x8664 MandrakeSoft Linux Mandrake 2009.1 MandrakeSoft Linux Mandrake 2009.0 x8664 MandrakeSoft...

Fedora Core 11 FEDORA-2009-7498 (mumbles)

The remote host is missing an update to mumbles announced via advisory FEDORA-2009-7498. OpenVAS Vulnerability Test $Id: fcore20097498.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7498 mumbles Authors: Thomas Reinke Copyright: Copyright c 2009...

Fedora Core 10 FEDORA-2009-7423 (openswan)

The remote host is missing an update to openswan announced via advisory FEDORA-2009-7423. OpenVAS Vulnerability Test $Id: fcore20097423.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7423 openswan Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:156 (net-snmp)

The remote host is missing an update to net-snmp announced via advisory MDVSA-2009:156. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora 10 : bugzilla-3.2.4-1.fc10 (2009-7669)

New upstream version fixing Unauthorized Bug Change flaw: http://www.bugzilla.org/security/3.2.3/ https://bugzilla.mozilla.org/showbug.cgi?id=495257 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

openSUSE Security Update : ntp (ntp-439)

This update of ntp improves a check for the return value of openssl's function EVPVerifyFinal. CVE-2009-0021 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ntp-439. The text description of th...

openSUSE Security Update : kdepim3 (kdepim3-770)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...

openSUSE Security Update : ntp (ntp-439)

This update of ntp improves a check for the return value of openssl's function EVPVerifyFinal. CVE-2009-0021 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ntp-439. The text description of th...

openSUSE Security Update : kernel (kernel-111)

The openSUSE 11.0 kernel was updated to 2.6.25.11. It fixes following security problems: CVE-2008-2812: Various tty / serial devices did not check functionpointers for NULL before calling them, leading to potential crashes or code execution. The devices affected are usually only accessible by the...

openSUSE Security Update : opera (opera-160)

This is a version upgrade for opera to version 9.52 to fix possible security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update opera-160. The text description of this plugin is ...

openSUSE Security Update : kernel (kernel-932)

This Linux kernel update for openSUSE 11.1 fixes lots of bugs and some security issues. The kernel was also updated to the 2.6.27.23 stable release. Following security issues have been fixed: CVE-2009-1439: Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows...

openSUSE Security Update : mediawiki (mediawiki-506)

Missing checks allowed remote attackers to conduct cross-site scripting XSS or cross-site request forgery CSRF attacks against MediaWiki CVE-2008-5250, CVE-2008-5252. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : postfix (postfix-133)

A local privilege escalation vulnerability as well as a mailbox ownership problem has been fixed in postfix. CVE-2008-2936 and CVE-2008-2937 have been assigned to this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extract...

openSUSE Security Update : ghostscript-devel (ghostscript-devel-592)

Integer overflows and missing upper bounds checks in Ghostscript's ICC library potentially allowed attackers to crash Ghostscript or even cause execution of arbitrary code via specially crafted PS or PDF files CVE-2009-0583, CVE-2009-0584. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

openSUSE Security Update : pam_mount (pam_mount-427)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 script was disabled for 11.0 and 11.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : clamav (clamav-809)

This clamav version upgrade to 0.95.1 fixes a buffer overflow error in the cliurlcanon function CVE-2009-1372 and a denial of service condition occuring while parsing malformed UPack archives CVE-2009-1371. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

openSUSE Security Update : libvirt (libvirt-373)

libvirt misses some read-only connection checks for certain methods. This flaw enables local unprivileged users for example to migrate virtual machines without authentication CVE-2008-5086. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : libsnmp15 (libsnmp15-319)

Remote attackers could crash net-snmp via GETBULK-Request CVE-2008-4309. In addition the following non-security issues have been fixed : - typo in error message bnc439857 - fix duplicate registration warnings on startup bnc326957 - container insert errors reproducable with shared ip setups...