SuSE 10 Security Update : yast2-backup (ZYPP Patch Number 5760)

This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

openSUSE Security Update : yast2-backup (yast2-backup-280)

This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update yast2-backup-280...

Code injection

The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...

CVE-2009-1648

The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...

CVE-2009-1648

The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...

CVE-2009-1648

CVE-2009-1648 affects the YaST2 LDAP module in the SUSE Linux Enterprise Server 11 package yast2-ldap-server. The underlying issue is that the firewall is not enabled in certain reboots during online updates, which can allow remote attackers to access network services. Publicly referenced materia...

CVE-2009-1648: Undefined Security Weakness

The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...

SuSE Update for yast2-backup SUSE-SA:2008:054

Check for the Version of yast2-backup OpenVAS Vulnerability Test $Id: gbsuse2008054.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for yast2-backup SUSE-SA:2008:054 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...

openSUSE 10 Security Update : yast2-backup (yast2-backup-5733)

This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update yast2-backup-573...

CVE-2008-4636

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...

CVE-2008-4636

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...

CVE-2008-4636

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...

CVE-2008-4636: Improper Neutralization of Special Elements used in an OS Command

yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...

CVE-2008-4636

CVE-2008-4636 affects yast2-backup versions 2.14.2–2.16.6 on SUSE Linux and Novell Linux. The root cause is shell metacharacters in filenames used by the backup process, which can allow local users to gain privileges (C/C and I/C/A impacts). The cited resources describe a security update for SUSE...

SuSE 10 Security Update : yast2-backup (ZYPP Patch Number 5739)

This updated of yast2-backup fixes a shellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : YaST2 (ZYPP Patch Number 4623)

This update fixes a security bug in yast2-core that allowed local attackers to provide malicious yast2 modules to yast2 that are executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. Thanks to Stefan Nordhausen for reporting th...

SuSE 10 Security Update : Xen (ZYPP Patch Number 2155)

This update includes both bug fixes and security fixes for Xen. A summary of the fixes appears below: 151105 - Fix various 'leaks' of loopback devices w/ domUloader 162865 - Re-send all page tables when migrating to avoid oops 167145 - Add status messages during file backed disk creation 176369 -...

CVE-2007-6167

Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory...

Design/Logic Flaw

Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious yast2 module in the current working directory...

CVE-2007-6167

CVE-2007-6167 concerns an untrusted search path vulnerability in the SUSE Linux component yast2-core . An attacker could cause local code execution by placing a malicious yast2 module in the current working directory, taking advantage of a search path weakness. The issue impacts local users who c...