openSUSE 10 Security Update : audit (audit-5212)

A bug in the auditlogusercommand function could lead to a buffer overflow. No program in openSUSE uses that function. Third-party applications could be affected though CVE-2008-1628. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2008-1628: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the auditlogusercommand function in lib/auditlogging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information...