openSUSE 10 Security Update : libmusicbrainz (libmusicbrainz-2044)

This update fixes various buffer overflows that can by exploited by malicious servers to execute arbitrary code. CVE-2006-4197 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : qt (qt-3050)

qt wrongly accepts overly long UTF-8 sequences due to a bug in the UTF-8 decoder. This may lead to security problems unter certain circumstances. The bug for example allows for script tag injection in konqueror CVE-2007-0242. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

openSUSE 10 Security Update : findutils-locate (findutils-locate-3965)

The cronjob that deletes old core files could be tricked to delete arbitrary files. Old core files are deleted if DELETEOLDCORE=yes is set. That is not the case by default though. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE 10 Security Update : dovecot (dovecot-3135)

A bug in dovecot allowed users to read compressed mailboxes of other users under certain circumstances. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dovecot-3135. The text description of th...

openSUSE 10 Security Update : dia (dia-1421)

A format string bug in dia could potentially be exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dia-1421. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : gv (gv-2338)

The previous 'gv' update to fix a stack overflow did not completely fix the problem spotted. An attacker could still cause the handling to use up all system memory, or open windows much wider than the X display and crash. Code execution however was not possible. %NASLMINLEVEL 70300 C Tenable...

openSUSE 10 Security Update : mysql (mysql-4375)

This update provides fixes for : - CVE-2007-3780: remote triggerable crash - CVE-2007-3781: query tables without propper authorisation - CVE-2007-3782: gain update privileges without propper authorisation %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks...

openSUSE 10 Security Update : CASA (CASA-1849)

Various bugs and problems were fixed in the CASA authentication framework, some of them security relevant : - Secrets with special characters inside were handled incorrectly. - Enhanced Salt generation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...

Fedora Core 6 : openssl-0.9.8b-15.fc6 (2007-725)

Fri Oct 12 2007 Tomas Mraz 0.9.8b-15 - fix CVE-2007-5135 - off-by-one in SSLgetsharedciphers 309801 - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow 321191 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora Core 6 : elinks-0.11.3-1.fc6 (2007-710)

Jump to new upstream version because of security issue 297991/done some other changes already committed to devel Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it ...

Moderate: kdelibs security update

3.5.4-13.el5.0.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm 3.5.4-13.el5 - Resolves: 293571 CVE-2007-0537 Konqueror improper HTML comment rendering CVE-2007-1564 FTP protocol PASV design flaw affects konqueror 3.5.4-12.el5 - resolves: 293421,...

SUSE-SA:2007:042: evolution,evolution-data-server

The remote host is missing the patch for the advisory SUSE-SA:2007:042 evolution,evolution-data-server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:042 if ! definedfunc"bnrandom" exit0;...

SUSE-SA:2007:038: krb5

The remote host is missing the patch for the advisory SUSE-SA:2007:038 krb5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:038 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:047: bind, bind9

The remote host is missing the patch for the advisory SUSE-SA:2007:047 bind, bind9. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:047 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2007:037: OpenOffice_org

The remote host is missing the patch for the advisory SUSE-SA:2007:037 OpenOfficeorg. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:037 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2007:033: clamav

The remote host is missing the patch for the advisory SUSE-SA:2007:033 clamav. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:033 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

Mandrake Linux Security Advisory : x11-server (MDKSA-2007:178)

Aaron Plattner discovered a buffer overflow in the Composite extension of the X.org X server, which if exploited could lead to local privilege escalation. Updated packages have been patched to prevent these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Design/Logic Flaw

Red Hat Enterprise Linux RHEL 5 ships the rpm for the Advanced Intrusion Detection Environment AIDE before 0.13.1 with a database that lacks checksum information, which allows context-dependent attackers to bypass file integrity checks and modify certain files...

CVE-2007-3849

CVE-2007-3849 affects Red Hat Enterprise Linux 5 where the AIDE package (before 0.13.1) ships with a database that lacks checksum information, allowing context-dependent attackers to bypass file integrity checks and modify certain files. The vulnerability centers on AIDE’s checksum database and a...

Fedora Core 6 : tar-1.15.1-26.fc6 (2007-683)

Wed Aug 29 2007 Radek Brich 2:1.15.1-26 - Fix CVE-2007-4131 tar directory traversal vulnerability 253685 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much...