4341 matches found
SUSE-SA:2006:071: phpMyAdmin
The remote host is missing the patch for the advisory SUSE-SA:2006:071 phpMyAdmin. The phpMyAdmin package was upgraded to version 2.9.1.1. While we usually do not do version upgrades, fixing the occurring security problems of phpMyAdmin got too difficult so we decided to go with the current...
SUSE-SA:2007:007: cacti
The remote host is missing the patch for the advisory SUSE-SA:2007:007 cacti. A command injection in cmd.php in cacti was fixed, which might have allowed remote attackers to inject commands and so execute code. This issue is tracked by the Mitre CVE ID CVE-2006-6799. %NASLMINLEVEL 70300 C Tenable...
SUSE-SA:2006:055: openssl,mozilla-nss
The remote host is missing the patch for the advisory SUSE-SA:2006:055 openssl,mozilla-nss. If an RSA key with exponent 3 is used it may be possible to forge a PKCS verify the certificate if they are not checking for excess data in the RSA exponentiation result of the signature. This problems...
SUSE-SA:2006:039: kdebase3-kdm
The remote host is missing the patch for the advisory SUSE-SA:2006:039 kdebase3-kdm. The KDE Display Manager KDM stores the type of the previously used session in the user's home directory. By using a symlink a local attacker could trick kdm into also storing content of files that are normally no...
SUSE-SA:2007:013: xine-ui,xine-lib,xine-extra,xine-devel
The remote host is missing the patch for the advisory SUSE-SA:2007:013 xine-ui,xine-lib,xine-extra,xine-devel. This update fixes several format string bugs that can be exploited remotely with user-assistance to execute arbitrary code. Since SUSE Linux version 10.1 format string bugs are not...
SUSE-SA:2006:072: openldap2-client
The remote host is missing the patch for the advisory SUSE-SA:2006:072 openldap2-client. OpenLDAP libldap's strval2strlen function contained a bug when processing the authcid string of certain Bind Requests, which could allow attackers to cause an affected application especially the OpenLDAP Serv...
SUSE-SA:2007:011: acroread
The remote host is missing the patch for the advisory SUSE-SA:2007:011 acroread. The Adobe Acrobat Reader has been updated to version 7.0.9. This update also includes following security fixes: CVE-2006-5857: A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to cod...
SUSE-SA:2007:001: OpenOffice_org
The remote host is missing the patch for the advisory SUSE-SA:2007:001 OpenOfficeorg. Security problems were fixed in the WMF and Enhanced WMF handling in OpenOfficeorg These could potentially be used to execute code or crash OpenOffice when a user could be convinced to open specially crafted...
SUSE-SA:2006:059: php4,php5
The remote host is missing the patch for the advisory SUSE-SA:2006:059 php4,php5. The inirestore method could be exploited to reset options such as openbasedir when set via the web server config file to their default value set in php.ini CVE-2006-4625. Additionally php5 on all products as well as...
SUSE-SA:2006:044: libtiff
The remote host is missing the patch for the advisory SUSE-SA:2006:044 libtiff. This update of libtiff is the result of a source-code audit done by Tavis Ormandy, Google Security Team. It fixes various bugs that can lead to denial-of-service conditions as well as to remote code execution while...
SUSE-SA:2006:070: pdns
The remote host is missing the patch for the advisory SUSE-SA:2006:070 pdns. Two security problems that have been found in PowerDNS are fixed by this update: CVE-2006-4251: The PowerDNS Recursor can be made to crash by sending malformed questions to it over TCP potentially executing code...
SUSE-SA:2006:077: flash-player
The remote host is missing the patch for the advisory SUSE-SA:2006:077 flash-player. This security update brings the Adobe Flash Player to version 7.0.69. The update fixes the following security problem: CVE-2006-5330: CRLF injection vulnerabilities in Adobe Flash Player allows remote attackers t...
SUSE-SA:2006:054: MozillaFirefox,MozillaThunderbird,SeaMonkey
The remote host is missing the patch for the advisory SUSE-SA:2006:054 MozillaFirefox,MozillaThunderbird,SeaMonkey. Security updates have been released that bring Mozilla Firefox to version 1.5.0.7, Mozilla Thunderbird to version 1.5.0.7 and Mozilla SeaMonkey to 1.0.5. SeaMonkey and Thunderbird...
SUSE-SA:2007:014: bind
The remote host is missing the patch for the advisory SUSE-SA:2007:014 bind. Two security problems were fixed in the ISC BIND nameserver version 9.3.4, which are addressed by this advisory: CVE-2007-0493: If recursion is enabled, a remote attacker can dereference a freed fetch context causing the...
SUSE-SA:2006:037: freetype2, freetype2-devel
The remote host is missing the patch for the advisory SUSE-SA:2006:037 freetype2, freetype2-devel. The freetype2 library renders TrueType fonts for open source projects. More than 900 packages on SUSE Linux use this library. Therefore the integer overflows in this code found by Josh Bressers and...
SUSE-SA:2006:045: freetype2
The remote host is missing the patch for the advisory SUSE-SA:2006:045 freetype2. This security update fixes crashes in the PCF handling of freetype2 which might be used to crash freetype2 using applications or even to execute code in them. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Thi...
SUSE-SA:2006:032: sendmail
The remote host is missing the patch for the advisory SUSE-SA:2006:032 sendmail. The Mail Transfer Agent sendmail has a remote exploitable problem, where a specially crafted MIME messages can crash sendmail and block queue processing. This issue is tracked by the Mitre CVE ID CVE-2006-1173 and CE...
SUSE-SA:2006:069: asterisk
The remote host is missing the patch for the advisory SUSE-SA:2006:069 asterisk. Two security problem have been found and fixed in the PBX software Asterisk. CVE-2006-5444: Integer overflow in the getinput function in the Skinny channel driver chanskinny.c as used by Cisco SCCP phones, allows...
Drupal Comment_Form_Add_Preview函数远程代码执行漏洞
Drupal是一款开放源码的内容管理平台。 Drupal不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是评注中的预览没有从普通验证函数通过就直接传递，启用用户可使用'post comments'权限并访问超过一个输入格式过滤来执行任意代码。默认情况下，匿名和验证用户只能访问仅一个输入格式。 vbDrupal 4.7.5 Drupal 4.7.5 Drupal 4.7.4 Drupal 4.7.4 Drupal 4.7.3 Drupal 4.7.3 Drupal 4.7.2 Drupal 4.7.1 Drupal 4.7 Drupal 5.0 补丁下载：...