SuSE 11.1 Security Update : perl (SAT Patch Number 3804)

Multiple header injection problems in the CGI module of perl have been fixed. They allowed to inject HTTP headers in responses. CVE-2010-2761 / CVE-2010-4410 / CVE-2010-4411 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.1 Security Update : Python (SAT Patch Number 3493)

The following issues have been fixed : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop module. CVE-2010-2089 / CVE-2010-1634 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 10 Security Update : cvs (ZYPP Patch Number 7302)

cvs fails with 'invalid pathname' error when using relative paths. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51638; scriptversion"1.7...

SuSE 11.1 Security Update : libpoppler (SAT Patch Number 3338)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.1 Security Update : IBM Java 1.4.2 (SAT Patch Number 3528)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11 Security Update : wireshark (SAT Patch Number 2082)

This update of wireshark fixes : - Remote attackers could potentially trigger a buffer overflow in the Daintree SNA file parser. CVE-2009-4376 - Specially crafted packets could cause the SMB and SMB2 dissector to crash wireshark. CVE-2009-4377 - Unspecified vulnerability in the Infiniband dissect...

SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 3103)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.1 Security Update : GDM (SAT Patch Number 3222)

This update provides the following fixes : - 633655: Change the way dbus properties are exported to avoid write access to read-only properties. - 627893: Upon relogin gdm displays the Windows domain, but tries to authenticate locally - 490621: Windows domain not remembered from previous log-in -...

SuSE 10 Security Update : Python (ZYPP Patch Number 7314)

With this update of Python : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop and rgbimg modules. CVE-2010-2089 / CVE-2010-1634 / CVE-2009-4134 / CVE-2010-1449 /...

SuSE 11.1 Security Update : LVM2 (SAT Patch Number 2982)

clvmd, when running, allowed unprivileged local users to issue arbitrary lvm commands CVE-2010-2526 via incorrect permissions. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : xpdf (SAT Patch Number 3377)

A specially crafted PDF files could crash xpdf or potentially even cause execution of arbitrary code. CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : opensc (SAT Patch Number 3729)

Specially crafted smart cards could cause a buffer overflow in opensc. CVE-2010-4523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL...

SuSE 10 Security Update : ed (ZYPP Patch Number 7301)

This update fixes a heap-based buffer overflow in ed which can be exploited remotely only with user-assistance. CVE-2008-3916: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Buffer Errors. CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin i...

SuSE 11.1 Security Update : evince (SAT Patch Number 3769)

Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : moonlight (SAT Patch Number 3728)

Untrusted Moonlight apps could bypass constraints on methods which potentially allowed attackers to execute arbitrary code. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The...

SuSE 11.1 Security Update : moonlight-plugin (SAT Patch Number 3606)

This update of moonlight does not allow abuse of mutable Strings to execute arbitrary code anymore. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrigh...

SuSE 10 Security Update : supportutils (ZYPP Patch Number 7215)

The supportconfig script did not disguise passwords in the config files it collected. CVE-2010-3912 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51447;...

SuSE 10 Security Update : xpdf (ZYPP Patch Number 7190)

A specially crafted PDF files could crash xpdf or potentially even cause execution of arbitrary code. CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : kdenetwork (ZYPP Patch Number 7245)

This update of kdenetwork fixes several bugs, the security related issues are : - CWE-119 The included libgadu version allowed remote servers to cause a denial of service crash via a buffer over-read. CVE-2008-4776: CVSS v2 Base Score: 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P Non-security issues : - kopete...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 7231)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. if NASLLEVEL 3000 exit0; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid51339;...