Design/Logic Flaw

SUSE Linux Enterprise 10 SP3 SLE10-SP3 and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions...

SuSE Update for kernel SUSE-SA:2010:005

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2010:005 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Sun Java System Directory Server 7.0 - core_get_proxyauth_dn Denial of Service

Sun Java System Directory Server 7.0 - coregetproxyauthdn Denial of Service source: https://www.securityfocus.com/bid/37699/info Sun Java System Directory Server is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the effected application, denying service to...

SuSE Security Advisory SUSE-SA:2009:062 (flash-player)

The remote host is missing updates announced in advisory SUSE-SA:2009:062. OpenVAS Vulnerability Test $Id: susesa2009062.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:062 flash-player Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SuSE Security Advisory SUSE-SA:2009:059 (bind)

The remote host is missing updates announced in advisory SUSE-SA:2009:059. OpenVAS Vulnerability Test $Id: susesa2009059.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:059 bind Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SuSE Security Advisory SUSE-SA:2009:060 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:060. OpenVAS Vulnerability Test $Id: susesa2009060.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:060 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

SUSE: Security Advisory for bind (SUSE-SA:2009:059)

The remote host is missing updates announced in advisory SUSE-SA:2009:059. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

SuSE Security Advisory SUSE-SA:2009:060 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:060. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability

No description provided by source. Bugtraq ID: 35451 Class: Boundary Condition Error Published: Jun 21 2009 12:00AM Updated: Nov 12 2009 06:46PM Credit: wololo Vulnerable: Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6632)

This update fixes a several security issues and various bugs in the SUSE Linux Enterprise 10 SP 2 kernel. The following security issues were fixed: CVE-2009-3547: A race condition during pipe open could be used by local attackers to elevate privileges. - On x8664 systems a information leak of hig...

SuSE Security Advisory SUSE-SA:2009:051 (kernel)

The remote host is missing updates announced in advisory SUSE-SA:2009:051. OpenVAS Vulnerability Test $Id: susesa2009051.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:051 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CVE-2009-1297

iscsidiscovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise SLE 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name...

DEBIAN-CVE-2009-1297

iscsidiscovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise SLE 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name...

CVE-2009-1297

iscsidiscovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise SLE 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name...

CVE-2009-1297

The CVE-2009-1297 issue affects open-iscsi’s iscsi_discovery in openSUSE/OpenSUSE 10.3–11.1 and SUSE/SLE 10 SP2–11. The root cause is unsafe creation of temporary files with a predictable name, enabling a local attacker to perform a symlink attack to overwrite arbitrary files. Several advisories ...

CVE-2009-1297

iscsidiscovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise SLE 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5668)

This kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and some security problems : - When creating a file, open/creat allowed the setgid bit to be set via the mode argument even when, due to the bsdgroups mount option or the file being created in a setgid directory, th...

SuSE9 Security Update : acroread (YOU Patch Number 11433)

The Adobe Acrobat Reader has been updated to version 7.0.9. For SUSE Linux Enterprise Server 9 this version now includes its own GLIB2, ATK, PANGO and GTK2 libraries, since Acroread 7.0.x requires a minimum level of GTK2 2.4. This update also includes following security fixes : - A memory...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6453)

This update fixes a single critical security issues in the SUSE Linux Enterprise 10 SP 2 kernel. - A missing check in the MSGPROBE handling can be used to execute privileges to root. CVE-2009-2698 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 6109)

This Linux kernel update for SUSE Linux Enterprise 10 Service Pack 2 fixes various bugs and several security issues. The following security issues were fixed: CVE-2009-0675: The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel permits SKFPCLRSTATS requests only when the...