openSUSE 10 Security Update : postgresql (postgresql-1443)

This update fixes a security problem that allowed attackers to inject SQL commands into queries CVE-2006-2313, CVE-2006-2314. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update postgresql-1443. T...

openSUSE 10 Security Update : hugin (hugin-4518)

This update of hugin disabled the usage of a temporary file. CVE-2007-5200 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update hugin-4518. The text description of this plugin is C SUSE LLC...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-2100)

This security update brings Mozilla Thunderbird to version 1.5.0.7. More Details can be found on this page: http://www.mozilla.org/projects/security/known-vulnerabilities.html It includes fixes to the following security problems: MFSA 2006-64/CVE-2006-4571: Crashes with evidence of memory...

openSUSE 10 Security Update : OpenOffice_org (OpenOffice_org-2408)

Following security problem was fixed in OpenOfficeorg : CVE-2006-5870: Bufferoverflows in WMF and Enhanced WMF handling in OpenOfficeorg could be used to potentially execute code or crash OpenOfficeorg. It is necessary that the user can be tricked to open a prepared document. This update also add...

openSUSE 10 Security Update : kdebase3 (kdebase3-3347)

A problem with the interaction between the Flash Player and the Konqueror webbrowser was fixed. The problem could lead to keypresses leaking to the applet instead of the browser. CVE-2007-2022 This update of khcindexbuilder restricts the commands that can be executed with EGID 'man'. %NASLMINLEVE...

openSUSE 10 Security Update : compat-openssl097g (compat-openssl097g-2171)

A buffer overflow condition within the SSLgetsharedciphers function and a DoS condition known as 'parasitic public keys' have been fixed. The later problem allowed attackers to trick the OpenSSL engine to spend an extraordinary amount of time to process public keys. The following CAN numbers have...

openSUSE 10 Security Update : fileshareset (fileshareset-4454)

Users could log in as root without having to enter the password if auto login was enabled and if kdm was configured to require the root passwort to shutdown the system CVE-2007-4569. JavaScript code could modify the URL in the address bar to make the currently displayed website appear to come fro...

openSUSE 10 Security Update : openssh (openssh-2256)

The OpenSSH release 4.5 contains a security fix which has been backported to the openssh versions in our old products. CVE-2006-5794: Incorrect return argument checking in the privilege separation monitor was fixed. In case of an exploitable unprivileged helper this could have been used to elevat...

openSUSE 10 Security Update : arts (arts-1670)

The KDE soundserver aRts lacked checks around some setuid calls. This could potentially be used by a local attacker to gain root privileges. CVE-2006-2916 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

openSUSE 10 Security Update : gv (gv-2266)

A stackoverflow in the postscript viewer gv could be used to exploited to execute code, if the user could be tricked into viewing a prepared postscript file. CVE-2006-5864 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

openSUSE 10 Security Update : mutt (mutt-3702)

This update of mutt fixes a vulnerability in the APOP implementation that allows an active attacker to guess three bytes of the password. CVE-2007-1558 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE 10 Security Update : wireshark (wireshark-3886)

Various security problems were fixed in the wireshark 0.99.6 release, which were backported : CVE-2007-3389: Wireshark allowed remote attackers to cause a denial of service crash via a crafted chunked encoding in an HTTP response, possibly related to a zero-length payload. CVE-2007-3390: Wireshar...

openSUSE 10 Security Update : openssl (openssl-2162)

A previous openssl update CVE-2006-2940 introduced another bug that can lead to a crash by providing a large prime number. An uninitialized pointer is freed during error handling. This bug allows remote attackers to crash services that use openssl. %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE 10 Security Update : samba (samba-3828)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE 10 Security Update : emacs (emacs-4197)

This update fixes a bug in parsing GIF images that lead to a crash of emacs. CVE-2007-2833 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update emacs-4197. The text description of this plugin is C...

openSUSE 10 Security Update : seamonkey (seamonkey-2098)

This security update brings Mozilla SeaMonkey to version 1.0.5. Please also see http://www.mozilla.org/projects/security/known-vulnerabilities.html for more details. It includes fixes to the following security problems: MFSA 2006-64/CVE-2006-4571: Crashes with evidence of memory corruption MFSA...

openSUSE 10 Security Update : avahi (avahi-3846)

Local attackers could send empty TXT data via D-BUS, causing the avahi daemon to exit. CVE-2007-3372 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-3846...

openSUSE 10 Security Update : samba (samba-3827)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSU...

openSUSE 10 Security Update : ImageMagick (ImageMagick-2235)

Two security problems were found in GraphicsMagick which are also present in ImageMagick. CVE-2006-5456: Multiple buffer overflows in ImageMagick allowed user-assisted attackers to cause a denial of service and possibly execute arbitrary code via 1 a DCM image that is not properly handled by the...

openSUSE 10 Security Update : xfsdump (xfsdump-3151)

The program xfsfsr created a temporary directory with unrestricted read and write permissions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update xfsdump-3151. The text description of this plugin...