SuSE 11.1 Security Update : rsync (SAT Patch Number 4300)

Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : tgt (SAT Patch Number 4409)

This update of tgt fixes multiple bugs : - tgtadm user unbind broken bnc633111 - iscsitarget package not supported bnc513934 - iscsitarget vs. tgt and /etc/ietd.conf bnc598927 - tgt fix double free flaw bnc665415, CVE-2011-0001 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.1 Security Update : mailman (SAT Patch Number 4433)

mailman was updated to version 2.1.14 to fix several cross-site scripting XSS vulnerabilities. CVE-2011-0707 / CVE-2010-3089 / CVE-2010-3090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.1 Security Update : libtiff (SAT Patch Number 4397)

The following bugs have been fixed : - Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder. CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : dbus (SAT Patch Number 4434)

Local users could crash the D-Bus daemon by sending a specially crafted message CVE-2010-4352. This update also properly fixes CVE-2008-3834 / CVE-2009-1189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.1 Security Update : Postfix (SAT Patch Number 4177)

The following bug has been fixed : - Postfix did not clear the receive buffer after the STARTTLS command. A man-in-the middle could therefore inject commands in the unencrypted stream that get interpreted in the encrypted phase after STARTTLS. CVE-2011-0411 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : Mono (SAT Patch Number 4260)

The following security bugs have been fixed : - Mono was vulnerable to a padding oracle attack. CVE-2010-3332 - Mono loaded shared libraries from the current directory. CVE-2010-4159 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4389)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note this update is...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4400)

Specially crafted Flash files could be exploited to execute arbitrary code. CVE-2011-0611 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.1 Security Update : kbd (SAT Patch Number 3825)

The following bug has been fixed : - The kbd init scripted wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. CVE-2011-0460 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : OpenLDAP (SAT Patch Number 4086)

The following security issues have been fixed : - Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password. CVE-2011-1024 - unauthenticated users could crash the ldap server. CVE-2011-1081 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.1 Security Update : sysconfig (SAT Patch Number 3954)

This update fixes the file permissions for ifcfg- files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 11.1 Security Update : dhcpv6 (SAT Patch Number 4317)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...

SuSE 11.1 Security Update : dhcp (SAT Patch Number 4315)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...

SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4316)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 This update also fixes...

SuSE 11.1 Security Update : libcgroup (SAT Patch Number 4081)

The following bugs have been fixed : - libcgroup suffered from a heap-based buffer overflow. CVE-2011-1006 - The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events. CVE-2011-1022 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

SuSE 11.1 Security Update : freetype2 (SAT Patch Number 4089)

Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

SuSE 11.1 Security Update : X11 (SAT Patch Number 4199)

Remote attackers could execute arbitrary commands as root by assigning specially crafted hostnames to X11 clients via XDMCP. CVE-2011-0465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. Th...

SuSE 11.1 Security Update : moonlight (SAT Patch Number 4246)

Moonlight was prone to several security problems : - modification of read-only values via RuntimeHelpers.InitializeArray. CVE-2011-0989 - buffer overflow due to race condition in in Array.FastCopy. CVE-2011-0990 - use-after-free due to DynamicMethod resurrection. CVE-2011-0991 - information leak...

SuSE 11.1 Security Update : libxml2 (SAT Patch Number 3775)

A bug in the Xpath processing inside libxml2 has been fixed. CVE-2010-4494 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...