OS Identification : Linux Distribution

This plugin attempts to identify the operating system type and version by looking at certain files on the remote operating system e.g., '/etc/redhat-release' on Red Hat. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25335;...

MDKA-2007:041 : console-tools

A limitation on the setkeycodes utility in the console-tools package was found, where it wasn't possible to set a keycode greater than 128, making it impossible to use extra keys like multimedia keys on Logitech keyboards or extra keys on many laptops. The updated packages raise the limit of...

Mandrake Linux Security Advisory : evolution (MDKSA-2007:107)

A weakness in the way Evolution processed certain APOP authentication requests was discovered. A remote attacker could potentially obtain certain portions of a user's authentication credentials by sending certain responses when evolution-data-server attempted to authenticate against an APOP serve...

Mandrake Linux Security Advisory : fetchmail (MDKSA-2007:105)

The APOP functionality in fetchmail's POP3 client implementation was validating the APOP challenge too lightly, accepting random garbage as a POP3 server's APOP challenge, rather than insisting it conform to RFC-822 specifications. As a result of this flaw, it made man-in-the-middle attacks easie...

Mandrake Linux Security Advisory : samba (MDKSA-2007:104-1)

A number of bugs were discovered in the NDR parsing support in Samba that is used to decode MS-RPC requests. A remote attacker could send a carefully crafted request that would cause a heap overflow, possibly leading to the ability to execute arbitrary code on the server CVE-2007-2446. A remote...

MDKA-2007:036 : kernel

This kernel fixes a bug in the USB sub-system that may cause system hangs while connecting or disconnecting USB devices. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

MDKA-2007:035 : curl

The curl shipped with 2007.0 had a bug which prevented it from working with the Club repositories, meaning users could not access the Club repositories unless they switched the default downloader for urpmi and rpmdrake to be wget. This update fixes the bug and allows the Club repositories to work...

Mandrake Linux Security Advisory : php (MDKSA-2007:102)

A heap buffer overflow flaw was found in the xmlrpc extension for PHP. A script that implements an XML-RPC server using this extension could allow a remote attacker to execute arbitrary code as the apache user. This flaw does not, however, affect PHP applications using the pure-PHP XMLRPC class...

Mandrake Linux Security Advisory : vim (MDKSA-2007:101)

A vulnerability in vim 7.0's modeline processing capabilities was discovered where a user with modelines enabled could open a text file containing a carefully crafted modeline, executing arbitrary commands as the user running vim. Updated packages have been patched to prevent this issue...

Mandrake Linux Security Advisory : clamav (MDKSA-2007:098)

iDefense discovered a stack-based overflow in ClamAV when processing negative values in .cab files. As well, multiple file descriptor leaks were also reported and fixed in chmunpack.c, pdf.c, and dblock.c. This update provides ClamAV 0.90.2 which corrects these problems and provides new...

Mandrake Linux Security Advisory : python (MDKSA-2007:099)

An off-by-one error was discovered in the PyLocalestrxfrm function in Python 2.4 and 2.5 that could allow context-dependent attackers the ability to read portions of memory via special manipulations that trigger a buffer over-read due to missing null termination. The updated packages have been...

MDKA-2007:030 : lsb

A problem with the dependencies of the lsb-qt4 package on x8664 prevented it from being installable. This update corrects that dependency issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...

Mandrake Linux Security Advisory : xscreensaver (MDKSA-2007:097)

A problem with the way xscreensaver verifies user passwords was discovered by Alex Yamauchi. When a system is using remote authentication i.e. LDAP for logins, a local attacker able to cause a network outage on the system could cause xscreensaver to crash, which would unlock the screen. Updated...

MDKA-2007:027 : php-session

The php-session package includes a cron setting to remove PHP sessions that are no longer in use. Previously, it could expire the session even if it was still in use. This update will prevent the cron job from removing sessions that are still actively being used, and will only expire after the la...

Mandrake Linux Security Advisory : sqlite (MDKSA-2007:091)

A buffer overflow in sqlite could allow context-dependent attackers to execute arbitrary code via an empty value of the 'in' parameter. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Mandrake Linux Security Advisory : freeradius (MDKSA-2007:085)

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service memory consumption via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUEPAIR...

Mandrake Linux Security Advisory : cups (MDKSA-2007:086)

A flaw was discovered in how CUPS handled SSL negotiation that could allow a remote attacker capable of connecting to the CUPS daemon to cause a DoS to other CUPS users. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2007:084)

The ipsec-tools package prior to version 0.6.7 allows remote attackers to cause a Denial of Service tunnel crash via crafted DELTE and NOTIFY messages. Updated packages have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

MDKA-2007:023 : autofs

A bug in the autofs master map parsing made it impossible to refer to LDAP mount maps there. This update fixes the issue. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security,...

Mandrake Linux Security Advisory : apache-mod_perl (MDKSA-2007:083)

PerlRun.pm in Apache modperl 1.30 and earlier, and RegistryCooker.pm in modperl 2.x, does not properly escape PATHINFO before use in a regular expression, which allows remote attackers to cause a denial of service resource consumption via a crafted URI. Updated packages have been patched to corre...