Mandrake Linux Security Advisory : kdegraphics (MDKSA-2002:071)

A vulnerability exists in KGhostview, part of the kdegraphics package. It includes a DSC 3.0 parser from GSview then is vulnerable to a buffer overflow while parsing a specially crafted .ps file. It also contains code from gv which is vulnerable to a similar buffer overflow triggered by malformed...

Mandrake Linux Security Advisory : tripwire (MDKSA-2001:064)

Jarno Juuskonen reported that a temporary file vulnerability exists in versions of Tripwire prior to 2.3.1-2. Because Tripwire opens/creates temporary files in /tmp without the OEXCL flag during filesystem scanning and database updating, a malicious user could execute a symlink attack against the...

SUSE-SA:2003:0008: imp

The remote host is missing the patch for the advisory SUSE-SA:2003:0008 imp. IMP is a well known PHP-based web-mail system. Some SQL-injection vulnerabilities were found in IMP 2.x that allow an attacker to access the underlying database. No authentication is needed to exploit this bug. An attack...

SuSE-SA:2004:008: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:008 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. During the analyzation of the CVS protocol and their implementation, the SuSE Security Team discovered ...

SUSE-SA:2003:011: openssl

The remote host is missing the patch for the advisory SUSE-SA:2003:011 openssl. OpenSSL is an implementation of the Secure Sockets Layer and Transport Layer Security protocols and provides strong cryptography for many applications in a Linux system. It is a default package in all SUSE products. A...

SuSE-SA:2004:012: mc

The remote host is missing the patch for the advisory SuSE-SA:2004:012 mc. The Midnight Commander mc is a file manager for the console. The mc code is vulnerable to several security related bugs like buffer overflows, incorrect format string handling and insecure usage of temporary files. These...

SUSE-SA:2002:036: mod_php4

The remote host is missing the patch for the advisory SUSE-SA:2002:036 modphp4. PHP is a well known and widely used web programming language. If a PHP script runs in 'safe mode' several restrictions are applied to it including limits on execution of external programs. An attacker can pass shell...

SUSE-SA:2003:036: pam_smb

The remote host is missing the patch for the advisory SUSE-SA:2003:036 pamsmb. The PAM module and server pamsmb allows users of Linux systems to be authenticated by querying an NT server. Dave Airlie informed us about a bug in the authentication code of pamsmb that allows a remote attacker to gai...

SuSE-SA:2004:018: subversion

The remote host is missing the patch for the advisory SuSE-SA:2004:018 subversion. Subversion is a version control system like the well known CVS. The subversion code is vulnerable to a remotely exploitable buffer overflow on the heap. The bug appears before any authentication took place. An...

SUSE-SA:2003:0007: cvs

The remote host is missing the patch for the advisory SUSE-SA:2003:0007 cvs. CVS Concurrent Versions System is a version control system which helps to manage concurrent editing of files by various authors. Stefan Esser of e-matters reported a 'double free' bug in CVS server code for handling...

SUSE-SA:2003:035: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2003:035 sendmail. The well known and widely used MTA sendmail is vulnerable to a remote denial-of-service attack in version 8.12.8 and earlier but not before 8.12. The bug exists in the DNS map code. This feature is enabled by...

SUSE-SA:2002:035: hylafax

The remote host is missing the patch for the advisory SUSE-SA:2002:035 hylafax. HylaFAX is a client-server architecture for receiving and sending facsimiles. The logging function of faxgetty prior version 4.1.3 was vulnerable to a format string bug when handling the TSI value of a received...

SUSE-SA:2003:032: wuftpd

The remote host is missing the patch for the advisory SUSE-SA:2003:032 wuftpd. Janusz Niewiadomski and Wojciech Purczynski of iSEC Security Research have found a single byte buffer overflow in the Washington University ftp daemon wuftpd, a widely used ftp server for Linux-like systems. It is yet...

SUSE-SA:2003:016: samba, samba-client

The remote host is missing the patch for the advisory SUSE-SA:2003:016 samba, samba-client. Sebastian Krahmer, SUSE Security Team, reviewed security-critical parts of the Samba server within the scope of security audits that the SUSE Security Team conducts on a regular basis for security-critical...

SUSE-SA:2003:022: apcupsd

The remote host is missing the patch for the advisory SUSE-SA:2003:022 apcupsd. The controlling and management daemon apcupsd for APC's Unbreakable Power Supplies is vulnerable to several buffer overflows and format bugs. These bugs can be exploited remotely by an attacker to gain root access to...

SuSE-SA:2004:004: gaim

The remote host is missing the patch for the advisory SuSE-SA:2004:004 gaim. Gaim is a multi-protocol instant-messaging client. Stefan Esser found 12 vulnerabilities in gaim that can lead to a remote system compromise with the privileges of the user running GAIM. The GAIM package that SUSE LINUX...

SuSE-SA:2004:002: tcpdump

The remote host is missing the patch for the advisory SuSE-SA:2004:002 tcpdump. Tcpdump is a well known tool for administrators to analyze network traffic. There is a bug in the tcpdump code responsible for handling ISAKMP messages. This bug allows remote attackers to destroy a current tcpdump...

SUSE-SA:2002:048: cyrus-imapd

The remote host is missing the patch for the advisory SUSE-SA:2002:048 cyrus-imapd. The cyrus imapd contains a buffer overflow which could be exploited by remote attackers prior to logging in. Attackers could generate oversized error messages and overflow buffers inside imapd. Additionally to thi...

SuSE-SA:2003:045: hylafax

The remote host is missing the patch for the advisory SuSE-SA:2003:045 hylafax. Hylafax is an Open Source fax server which allows sharing of fax equipment among computers by offering its service to clients by a protocol similar to FTP. The SuSE Security Team found a format bug condition during a...

SUSE-SA:2003:040: sendmail, sendmail-tls

The remote host is missing the patch for the advisory SUSE-SA:2003:040 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...