CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-0995

The CVE-2011-0995 issue affects the sqlite3-ruby gem in the rubygem-sqlite3 package for SUSE Linux Enterprise (SLE) 11 SP1. Vulnerable: sqlite3-ruby before 1.2.4-0.5.1; cause: weak permissions on unspecified files. Impact: local users can gain privileges via unknown vectors. Remediation: upgrade ...

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

rubygem-sqlite3 gem uses weak file permissions

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-0988

pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable directory, which allows local users to overwrite arbitrary files and gain privileges via unspecified vectors...

SuSE9 Security Update : the Linux kernel (YOU Patch Number 12672)

This patch updates the SUSE Linux Enterprise Server 9 kernel to fix various security issues and some bugs. The following security issues were fixed : - The hciuartttyopen function in the HCI UART driver drivers/bluetooth/hcildisc.c in the Linux kernel did not verify whether the tty has a write...

SuSE 10 Security Update : Realplayer and banshee (ZYPP Patch Number 7122)

The security support of Real Player 10 was discontinued a while ago by Real Networks. As there are known critical security problems in Real Player 10 and we are unable to fix them nor update to Real Player 11, we are disabling this player. The media player of SUSE Linux Enterprise Desktop 10, Hel...

SuSE 11 Security Update : Linux kernel (SAT Patch Number 3164)

This security update of the SUSE Linux Enterprise 11 GA kernel fixes 3 critical security issues. Following security bugs were fixed : - Mismatch between 32bit and 64bit register usage in the system call entry path could be used by local attackers to gain root privileges. This problem only affects...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3760 / 3762 / 3763)

The SUSE Linux Enterprise 11 Service Pack 1 kernel was updated to 2.6.32.27 and fixes various bugs and security issues. The following security issues were fixed : - A local attacker could use a Oops kernel crash caused by other flaws to write a 0 byte to a attacker controlled address in the kerne...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3068 / 3069 / 3070)

This SUSE Linux Enterprise 11 Service Pack 1 kernel contains various security fixes and lots of other bugfixes. Notable larger bugfixes and changes : - 603464: Fix system freezewhen doing a network crashdump with a netxennic driver - 610828: Avoid kernel failure on connects/disconnects to a novel...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1079 / 1087)

The SUSE Linux Enterprise 11 kernel was updated to fix various bugs and several security issues. It was also updated to the stable release 2.6.27.25. The following security issues were fixed : - A local denial of service problem in the splice2 system call was fixed. CVE-2009-1961 - A crash on r81...

SuSE 11.1 Security Update : Linux kernel (SAT Patch Numbers 3433 / 3436 / 3445)

This update of the SUSE Linux Enterprise Server 11 SP1 kernel brings the kernel to 2.6.32.24 and fixes some critical security bugs and other non-security bugs. Following security bugs were fixed : - A iovec integer overflow in RDS sockets was fixed which could lead to local attackers gaining kern...

Design/Logic Flaw

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors...

CVE-2010-3912

The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack vectors...

CVE-2010-3912

CVE-2010-3912 (NORMAL) Affected products: SUSE Linux Enterprise 11 SP1 and 10 SP3, involving the supportconfig script within the supportutils package. Vulnerability: The supportconfig script does not disguise passwords in configuration files it collects. The available description notes unknown im...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 2682 / 2687 / 2689)

The SUSE Linux Enterprise 11 kernel was updated to 2.6.27.48, fixing various bugs and security issues : - The dogfs2setflags function in fs/gfs2/file.c of the Linux kernel does not verify the ownership of a file, which allows local users to bypass intended access restrictions via a SETFLAGS ioctl...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 2838 / 2841 / 2842)

The SUSE Linux Enterprise 11 Kernel was updated fixing a single regression : The previous update contained an erronous fix which broke the IPv4 GRE tunneling module. This regression is fixed by this update. No other change is contained in this update, if you are not using the module, this update ...

SuSE Update for flash-player SUSE-SA:2010:055

Check for the Version of flash-player OpenVAS Vulnerability Test SuSE Update for flash-player SUSE-SA:2010:055 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Adobe Flash Player CVE-2010-3643 Remote Memory Corruption Vulnerability

Description Adobe Flash Player is prone to a remote memory corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will likely result in denial-of-service conditions. NOTE: This iss...