SuSE9 Security Update : Tomcat (YOU Patch Number 12271)

This update of tomcat fixes an information leak due to incorrect IP address filtering. CVE-2008-3271 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41249;...

SuSE 10 Security Update : curl (ZYPP Patch Number 6015)

Arbitrary file access via HTTP-redirect has been fixed in curl. CVE-2009-0037 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : IBMJava5 JRE and IBMJava5 SDK (YOU Patch Number 12265)

IBM Java 5 was updated to SR8a to fix a security issue : - A vulnerability in the Java Management Extensions JMX agent when local monitoring is enabled, allowed remote attackers to 'perform unauthorized operations'. CVE-2008-3103 This update also includes new timezone data and fixes missing...

SuSE 10 Security Update : liblcms (ZYPP Patch Number 6048)

Specially crafted image files could cause an integer overflow in lcms. Attackers could potentially exploit that to crash applications using lcms or even execute arbitrary code. CVE-2009-0723 / CVE-2009-0581 / CVE-2009-0733 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

SuSE9 Security Update : dhcp-server (YOU Patch Number 11373)

A bug was fixed were a LDAP server with malicious data providing information to the DHCP server could crash and potentially execute code as the DHCP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE9 Security Update : vsftpd (YOU Patch Number 12192)

This update of vsftpd fixes a memory leak that can occur during authentication. CVE-2008-2375 Additionally non-security bugs for SLES10 were fixed. There were some issues with simultaneous FTP PUT of the same file name that lead to a corrupted file on the server. %NASLMINLEVEL 70300 C Tenable...

SuSE9 Security Update : ethereal (YOU Patch Number 12323)

This update fixes problems that could crash wireshark when processing compressed data CVE-2008-3933 and Q.931 packets. CVE-2008-4685 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : libtiff (ZYPP Patch Number 6407)

This update of the tiff package fixes various integer overflows in the tools. CVE-2009-2347 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41553;...

SuSE 10 Security Update : libapr-util1 (ZYPP Patch Number 6289)

This update of libapr-util1 fixes a memory consumption bug in the XML parser that can cause a remote denial-of-service vulnerability in applications using APR WebDAV for example CVE-2009-1955. Additionally a one byte buffer overflow in function aprbrigadevprintf CVE-2009-1956 and buffer underflow...

SuSE 11 Security Update : Kerberos (SAT Patch Number 738)

Clients sending negotiation requests with invalid flags could crash the kerberos server. CVE-2009-0845 GSS-API clients could crash when reading from an invalid address space. CVE-2009-0844 Invalid length checks could crash applications using the kerberos ASN.1 parser. CVE-2009-0847 Under certain...

SuSE 10 Security Update : bind (ZYPP Patch Number 6382)

Specially crafted ddns update packets could trigger an exception in bind causing it to exit. The attack works if BIND is master for a zone even if ddns is not configured. CVE-2009-0696 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : Xerces-j2 (ZYPP Patch Number 6449)

The xerces-j2 package was vulnerable to various bugs while parsing XML. CVE-2009-2625 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 11 Security Update : acroread_ja (SAT Patch Number 904)

This update of acroread fixes two vulnerabilities in the JavaScript API that allow attackers to execute arbitrary code with a malformed PDF file. CVE-2009-1492 / CVE-2009-1493 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

SuSE9 Security Update : wget (YOU Patch Number 11090)

This update fixes a security bug in wget, where evil servers could send terminal escape codes to the user calling wget. This would only affect interactive sessions. CVE-2004-1488 Additionally a previous '.file' fix was found to be buggy and replaced. This bug could lead to '.directories' not bein...

SuSE 10 Security Update : ia32el (ZYPP Patch Number 6466)

A 32bit x86 user program could crash the Itanium IA64 kernel in the IA 32 Intel 32bit emulation. CVE-2009-2707 Updating IA32EL to 70427022, the same version as shipped on SLES 10 SP3, fixes this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE 11 Security Update : libsndfile (SAT Patch Number 944)

This update of libsndfile fixes a heap-based buffer overflow in vocreadheader CVE-2009-1788 and a heap-based buffer overflow in aiffreadheader. CVE-2009-1791 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11 Security Update : ImageMagick (SAT Patch Number 963)

This update of ImageMagick fixes an integer overflow in the XMakeImage function that allowed remote attackers to cause a denial-of-service and possibly the execution of arbitrary code via a crafted TIFF file. CVE-2009-1882 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

SuSE 11 Security Update : Websphere Community Edition (SAT Patch Number 1016)

This update of WebSphere fixes the following vulnerabilities : - GERONIMO-3838: close potential denial of service attack - fix Apache Geronimo web administration console directory traversal vulnerabilities. CVE-2008-5518 - fix Apache Geronimo web administration console XSS vulnerabilities...

SuSE9 Security Update : libexif (YOU Patch Number 11555)

A denial of service problem crash was fixed in the EXIF Loader of libexif, which could be used to crash the browser or image viewer when it interprets the EXIF tags in prepared JPEG files. CVE-2007-2645 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C...

SuSE9 Security Update : libpng (YOU Patch Number 11956)

Specially crafted PNG files could crash applications while attempting to process the file by exploiting out-of-bounds read operations. This can be abused for local and remote denial of service attacks. The issue has been tracked by CVE-2007-5269. %NASLMINLEVEL 70300 C Tenable Network Security, In...