CVE-2010-1507

Vulnerability CVE-2010-1507 affects WebYaST in the yast2-webclient of SUSE Linux Enterprise 11 on the WebYaST appliance. The root cause is a fixed secret key embedded in the appliance image, which enables remote attackers to spoof session cookies by exploiting knowledge of this key. Publicly know...

CVE-2010-1507: Undefined Security Weakness

WebYaST in yast2-webclient in SUSE Linux Enterprise SLE 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by leveraging knowledge of this key...

SLES10: Security update for yast2-backup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-backup More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at http://download.novell.com/patch/finder/...

SLES10: Security update for yast2-backup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-backup More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references. SPDX-FileCopyrightText:...

SLES11: Security update for YaST2 LDAP module

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-ldap-server More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES11: Security update for YaST2 LDAP module

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-ldap-server More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

SLES9: Security update for YaST2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-core-devel yast2-core More details may also be found by searching for keyword 5010516 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for yast2-mail-server

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-mail-server More details may also be found by searching for keyword 5021278 within the SuSE Enterprise Server 9 patch database linked in the references...

SLES9: Security update for YaST2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-core-devel yast2-core More details may also be found by searching for keyword 5010516 within the SuSE Enterprise Server 9 patch database linked in the...

SLES9: Security update for yast2-backup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-backup For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5037889 within th...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-subdomain subdomain-utils subdomain-parser subdomain-profiles subdomain-parser-common More details may also be found by searching for keyword 5014564...

SLES9: Security update for yast2-mail-server

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-mail-server More details may also be found by searching for keyword 5021278 within the SuSE Enterprise Server 9 patch database at...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: subdomain-utils yast2-subdomain subdomain-parser-common subdomain-profiles subdomain-parser More details may also be found by searching for keyword 5010007...

SLES9: Security update for yast2-backup

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-backup For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5037889 within th...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: yast2-subdomain subdomain-utils subdomain-parser subdomain-profiles subdomain-parser-common More details may also be found by searching for keyword 5014564...

SLES9: Security update for subdomain-parser

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: subdomain-utils yast2-subdomain subdomain-parser-common subdomain-profiles subdomain-parser More details may also be found by searching for keyword 5010007...

SuSE9 Security Update : SLES9-SP4: Security update for yast2-mail-server (YOU Patch Number 11602)

If you go to YaST -- Mail Server -- FetchMail and select add account window. While entering the password for the remote user, it shows the password. Now the password field echoes '', instead of plain text. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE 11 Security Update : YaST2 LDAP module (SAT Patch Number 896)

The YaST2 LDAP module in SUSE Linux Enterprise Server 11 did not initialize the firewall configuration during second stage installation. Therefore, if an online update required reboot during second stage firewall settings were not applied and the firewall turned off. CVE-2009-1648 %NASLMINLEVEL...

SuSE9 Security Update : yast2-backup (YOU Patch Number 12279)

This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : YaST2 (YOU Patch Number 11952)

This update fixes a security bug in yast2-core that allows local attackers to provide malicious YaST2 modules to YaST2 which are subsequently executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. %NASLMINLEVEL 70300 C Tenable...