MDKA-2007:120 : util-linux-ng

The mount program failed to mount Samba mountpoints if the path of the Samba share existed on the local system. When calling mount -t smbfs //foo/bar /mnt/foo, mount.smbfs would be called with /foo/bar if /foo/bar existed locally, and would display its usage. This update package fixes the issue...

MDKA-2007:076 : rdesktop

A problem in rdesktop version 1.5.0 was discovered by upstream developers, which would crash it when used on a 16 bits display with a windows 2003 server system. The updated packages have been patched to correct this. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

MDKA-2007:072 : nss

These updated packages add the CaCert root certificate to the authorities list. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generat...

MDKA-2007:061 : evolution

A large number of bugs in Evolution are corrected with this update, including the use of non-english locales. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This...

MDKA-2007:109 : beagle

A missing path in the beagle command line tools made beagle-info crash. This update corrects the problem. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:157)

The KDE HTML library kdelibs, as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting XSS attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to...

Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:131)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.4. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

Mandrake Linux Security Advisory : kernel (MDKSA-2007:232)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The minix filesystem code allows local users to cause a denial of service hang via a malformed minix file stream CVE-2006-6058. An integer underflow in the Linux kernel prior to 2.6.23 allows remote attackers to cause a...

Mandrake Linux Security Advisory : ghostscript (MDKSA-2007:208)

A function in the JasPer JPEG-2000 library before 1.900 could allow a remote user-assisted attack to cause a crash and possibly corrupt the heap via malformed image files. Newer versions of ghostscript contain an embedded copy of libjasper and as such is vulnerable to this issue. Updated packages...

Mandrake Linux Security Advisory : ktorrent (MDKSA-2007:095)

A directory traversal vulnerability was found in KTorrent prior to 2.1.2, due to an incomplete fix for a prior directory traversal vulnerability that was corrected in version 2.1.2. Previously, KTorrent would only check for the string .., which could permit strings such as ../. Updated packages...

Mandrake Linux Security Advisory : qt3 (MDKSA-2007:074)

Andreas Nolden discover a bug in qt3, where the UTF8 decoder does not reject overlong sequences, which can cause '/../' injection or in the case of konqueror a '' tag injection. Updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Mandriva Update for kdelibs MDKSA-2007:072 (kdelibs)

Check for the Version of kdelibs OpenVAS Vulnerability Test Mandriva Update for kdelibs MDKSA-2007:072 kdelibs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for gtk+2.0 MDKA-2007:100 (gtk+2.0)

Check for the Version of gtk+2.0 OpenVAS Vulnerability Test Mandriva Update for gtk+2.0 MDKA-2007:100 gtk+2.0 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for evolution MDKSA-2007:107 (evolution)

Check for the Version of evolution OpenVAS Vulnerability Test Mandriva Update for evolution MDKSA-2007:107 evolution Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandrake Security Advisory MDVSA-2009:044 (firefox)

The remote host is missing an update to firefox announced via advisory MDVSA-2009:044. OpenVAS Vulnerability Test $Id: mdksa2009044.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:044 firefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Mandrake Linux Security Advisory : MySQL (MDKSA-2007:243)

A vulnerability in MySQL prior to 5.0.45 did not require priveliges such as SELECT for the source table in a CREATE TABLE LIKE statement, allowing remote authenticated users to obtain sensitive information such as the table structure CVE-2007-3781. A vulnerability in the InnoDB engine in MySQL...

Mandrake Linux Security Advisory : libnfsidmap (MDKSA-2007:240)

The NFSv4 ID mapper prior to 0.17 did not properly handle return values from the getpwnamr function when performing a username lookup, which could cause it to report a file as being owned by 'root' instead of 'nobody' if the file exists on the server but not the client. The updated packages have...

Mandrake Linux Security Advisory : e2fsprogs (MDKSA-2007:242)

Rafal Wojtczuk of McAfee AVERT Research found that e2fsprogs contained multiple integer overflows in memory allocations, based on sizes taken directly from filesystem information. These flaws could result in heap-based overflows potentially allowing for the execution of arbitrary code. The update...

Mandrake Linux Security Advisory : openssh (MDKSA-2007:236)

A flaw in OpenSSH prior to 4.7 prevented ssh from properly handling when an untrusted cookie could not be created and used a trusted X11 cookie instead, which could allow attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted. The updated packages...

Mandrake Linux Security Advisory : openssl (MDKSA-2007:237)

A buffer overflow in the DTLS implementation of OpenSSL 0.9.8 could be exploited by attackers to potentially execute arbitrary code. It is questionable as to whether the DTLS support even worked or is used in any applications; as a result this flaw most likely does not affect most Mandriva users...