SuSE 11 Security Update : curl (SAT Patch Number 634)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C...

SuSE 11 Security Update : Cyrus IMAPD (SAT Patch Number 1284)

This update of cyrus-imapd fixes a buffer overflow that occurs in snprintf due to incorrectly calculating the size of the destination buffer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11 Security Update : OpenEXR (SAT Patch Number 1155)

This update of OpenEXR fixes several integer overflows CVE-2009-1720 and a denial-of-service probably execution of arbitrary code bug. CVE-2009-1721 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11 Security Update : dbus (SAT Patch Number 726)

The dbus package used a too permissive configuration. Therefore intended access control for some services was not applied. CVE-2008-4311 The new configuration denies access by default. Some dbus services may break due to this setting and need an updated configuration as well. With the previous...

SuSE 11 Security Update : MySQL (SAT Patch Number 1114)

the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities. CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks CVE-2008-4456 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

SuSE 11 Security Update : Kerberos (SAT Patch Number 738)

Clients sending negotiation requests with invalid flags could crash the kerberos server. CVE-2009-0845 GSS-API clients could crash when reading from an invalid address space. CVE-2009-0844 Invalid length checks could crash applications using the kerberos ASN.1 parser. CVE-2009-0847 Under certain...

SuSE 11 Security Update : curl (SAT Patch Number 1173)

This update of libcurl2 fixes the 0-character handling in the subject name of a SSL certificate. This bug could be used to execute an undetected man-in-the-middle-attack. CVE-2009-2417 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 769)

Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...

SuSE 11 Security Update : ImageMagick (SAT Patch Number 963)

This update of ImageMagick fixes an integer overflow in the XMakeImage function that allowed remote attackers to cause a denial-of-service and possibly the execution of arbitrary code via a crafted TIFF file. CVE-2009-1882 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11 Security Update : libsndfile (SAT Patch Number 944)

This update of libsndfile fixes a heap-based buffer overflow in vocreadheader CVE-2009-1788 and a heap-based buffer overflow in aiffreadheader. CVE-2009-1791 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11 Security Update : silc-toolkit (SAT Patch Number 1282)

This update of slic-toolkit fixes stack-based overflow while encoding a ASN.1 OID CVE-2008-7159 and several format string bugs CVE-2009-3051 / CVE-2008-7160. The probability to exploit this issues to execute arbitrary code is high. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 1059)

This update of acroread fixes the following security vulnerabilities : - stack overflow that could lead to code execution. CVE-2009-1855 - integer overflow with potential to lead to arbitrary code execution. CVE-2009-1856 - memory corruption with potential to lead to arbitrary code execution...

SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 899)

This update of acroread fixes two vulnerabilities in the JavaScript API that allow attackers to execute arbitrary code with a malformed PDF file. CVE-2009-1492 / CVE-2009-1493 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

SuSE 11 Security Update : libpng (SAT Patch Number 1039)

This update of libpng improves the parsing of 1-bit interlaced images. This bug could be abused to use 'out-of-bounds pixels' to read memory. CVE-2009-2042 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 updat...

SuSE 11 Security Update : pidgin (SAT Patch Number 1245)

This update of pidgin fixes a remote arbitrary code execution vulnerability in MSN SLP packet processing code. CORE-2009-0727 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself...

SuSE 11 Security Update : Sun JDK 6 (SAT Patch Number 699)

The Sun JDK 6 was updated to Update13 to fix various bugs and security issues. - LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier does not close...

SuSE 11 Security Update : Websphere Community Edition (SAT Patch Number 1016)

This update of WebSphere fixes the following vulnerabilities : - GERONIMO-3838: close potential denial of service attack - fix Apache Geronimo web administration console directory traversal vulnerabilities. CVE-2008-5518 - fix Apache Geronimo web administration console XSS vulnerabilities...

SuSE 11 Security Update : flash-player (SAT Patch Number 612)

Specially crafted swf files could cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute code on the victim's machine. CVE-2009-0519 / CVE-2009-0520 / CVE-2009-0114 / CVE-2009-0521 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

SuSE 11 Security Update : GhostScript (SAT Patch Number 876)

Specially crafted file could cause a heap-overflow in JBIG2 decoder CVE-2009-0196, an integer overflow in ICC library CVE-2009-0792, a buffer overflow in BaseFont writer module CVE-2008-6679 or crash the CCITTFax decoder. CVE-2007-6725 The previous security update introduced a regression that bro...

SuSE 11 Security Update : dhcp-client (SAT Patch Number 1041)

The DHCP client dhclient could be crashed by a malicious DHCP server sending a overlong subnet field. CVE-2009-0692 In some circumstances code execution might be possible, but might be caught by the buffer overflow checking in newer distributions. SLES 10 and 11. %NASLMINLEVEL 70300 C Tenable...