SuSE Update for clamav SUSE-SA:2008:024

Check for the Version of clamav OpenVAS Vulnerability Test $Id: gbsuse2008024.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for clamav SUSE-SA:2008:024 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

SuSE Update for kernel SUSE-SA:2008:048

Check for the Version of kernel OpenVAS Vulnerability Test $Id: gbsuse2008048.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel SUSE-SA:2008:048 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software;...

SuSE Update for MozillaFirefox SUSE-SA:2008:019

Check for the Version of MozillaFirefox OpenVAS Vulnerability Test $Id: gbsuse2008019.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for MozillaFirefox SUSE-SA:2008:019 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Sun Java Runtime Environment and Java Development Kit Multiple Security Vulnerabilities

Description Sun Java Runtime Environment and Java Development Kit are prone to multiple security vulnerabilities. Successful exploits may allow attackers to violate the same-origin policy, obtain sensitive information, bypass security restrictions, run untrusted applets with elevated privileges,...

SuSE 10 Security Update : Linux Kernel (x86) (ZYPP Patch Number 5734)

This patch updates the SUSE Linux Enterprise 10 SP1 kernel. It fixes various bugs and security issues. The following security issues are addressed : - fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local use...

Linux Kernel 'do_change_type()' Local Security Bypass Vulnerability

The Linux kernel is prone to a local security-bypass vulnerability because the 'dochangetype' routine fails to adequately verify user permissions before performing mountpoint type changes. Attackers can exploit this issue to bypass security restrictions and change mountpoint types. Attackers coul...

SuSE 10 Security Update : the Linux Kernel (x86) (ZYPP Patch Number 5566)

This update of the SUSE Linux Enterprise 10 Service Pack 1 kernel contains lots of bugfixes and several security fixes : - Added missing capability checks in sbniioctl. CVE-2008-3525 - On AMD64 some string operations could leak kernel information into userspace. CVE-2008-0598 - Added range checki...

Samba lsa_io_trans_names buffer overflow

Added: 12/24/2007 CVE: CVE-2007-2446 BID: 24195 OSVDB: 34699 Background Samba is a software package which implements the SMB protocol on a variety of platforms, providing compatibility with Windows systems. Problem A vulnerability in the LSA RPC interface allows a remote attacker to execute...

Default configuration

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service daemon exit via a GSS-TSIG request. NOTE: this issue probably affects other daemons that...

CVE-2007-5471

CVE-2007-5471 affects libgssapi before 0.6-13.7 used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP1. The library terminates on an initialization error, allowing remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request. The issue probably affects othe...

CVE-2007-5196

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5195...

CVE-2007-5195

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

Code injection

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5195...

CVE-2007-5196

CVE-2007-5196 affects SUSE Linux Enterprise Desktop 10 via the GroupWise client (novell-groupwise-client). The vulnerability lies in the SSL implementation and can allow remote attackers to obtain credentials through a man-in-the-middle attack. The issue is addressed by a SUSE security update (ZY...

CVE-2007-5195

Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196...

CVE-2007-5195

This CVE refers to an unspecified vulnerability in the SSL implementation of the GroupWise client (novell-groupwise-client) for SUSE Linux Enterprise Desktop 10 that allows remote attackers to obtain credentials via a man-in-the-middle attack (CVE-2007-5195 and related CVE-2007-5196). The connect...

SUSE-SA:2006:043: apache,apache2

The remote host is missing the patch for the advisory SUSE-SA:2006:043 apache,apache2. The following security problem was fixed in the Apache and Apache 2 web servers: modrewrite: Fix an off-by-one security problem in the ldap scheme handling. For some RewriteRules this could lead to a pointer...

SUSE-SA:2007:003: Sun Java

The remote host is missing the patch for the advisory SUSE-SA:2007:003 Sun Java. The SUN Java packages have been upgraded to fix security problems. SUN Java was upgraded on all affected distributions: - The Java 1.3 version to 1.3.119 for SUSE Linux Enterprise Server 8. - The Java 1.4 version als...