SuSE 11.1 Security Update : aaa_base (SAT Patch Number 3910)

The following bug has been fixed : - The boot.localfs init script wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. CVE-2011-0461 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.1 Security Update : Perl (SAT Patch Number 4499)

This update fixes a bug in Perl that makes spamassassin crash and does not allow bypassing taint mode by using lc or uc anymore. - CVE-2010-4777: CVSS v2 Base Score: 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P - CVE-2011-1487: CVSS v2 Base Score: 2.6 AV:N/AC:H/Au:N/C:N/I:P/A:N: Permissions, Privileges, and...

SuSE 11.1 Security Update : rsync (SAT Patch Number 4300)

Specially crafted requests could cause a memory corruption on the receiving side of an rsync transfer client side or server that allows to push CVE-2011-1097. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : tgt (SAT Patch Number 4409)

This update of tgt fixes multiple bugs : - tgtadm user unbind broken bnc633111 - iscsitarget package not supported bnc513934 - iscsitarget vs. tgt and /etc/ietd.conf bnc598927 - tgt fix double free flaw bnc665415, CVE-2011-0001 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

SuSE 11.1 Security Update : mailman (SAT Patch Number 4433)

mailman was updated to version 2.1.14 to fix several cross-site scripting XSS vulnerabilities. CVE-2011-0707 / CVE-2010-3089 / CVE-2010-3090 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information...

SuSE 11.1 Security Update : dbus (SAT Patch Number 4434)

Local users could crash the D-Bus daemon by sending a specially crafted message CVE-2010-4352. This update also properly fixes CVE-2008-3834 / CVE-2009-1189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 11.1 Security Update : libtiff (SAT Patch Number 4397)

The following bugs have been fixed : - Specially crafted tiff files could cause a heap-based buffer overflow in the thunder-decoder. CVE-2011-1167 - Directories with a large number of files could cause an integer overflow in the tiffdump tool CVE-2010-4665 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : Postfix (SAT Patch Number 4177)

The following bug has been fixed : - Postfix did not clear the receive buffer after the STARTTLS command. A man-in-the middle could therefore inject commands in the unencrypted stream that get interpreted in the encrypted phase after STARTTLS. CVE-2011-0411 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : Mono (SAT Patch Number 4260)

The following security bugs have been fixed : - Mono was vulnerable to a padding oracle attack. CVE-2010-3332 - Mono loaded shared libraries from the current directory. CVE-2010-4159 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4389)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 Note this update is...

SuSE 11.1 Security Update : kbd (SAT Patch Number 3825)

The following bug has been fixed : - The kbd init scripted wrote a file to /dev/shm during shut-down. Since local users may create symlinks there a malicious user could cause corruption of arbitrary files. CVE-2011-0460 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : OpenLDAP (SAT Patch Number 4086)

The following security issues have been fixed : - Master/slave configurations with enabled 'ppolicyforwardupdates' option potentially allowed users to log in with an invalid password. CVE-2011-1024 - unauthenticated users could crash the ldap server. CVE-2011-1081 %NASLMINLEVEL 70300 C Tenable...

SuSE 11.1 Security Update : flash-player (SAT Patch Number 4400)

Specially crafted Flash files could be exploited to execute arbitrary code. CVE-2011-0611 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

SuSE 11.1 Security Update : sysconfig (SAT Patch Number 3954)

This update fixes the file permissions for ifcfg- files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 11.1 Security Update : dhcpv6 (SAT Patch Number 4317)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...

SuSE 11.1 Security Update : dhcpcd (SAT Patch Number 4316)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0996 This update also fixes...

SuSE 11.1 Security Update : libcgroup (SAT Patch Number 4081)

The following bugs have been fixed : - libcgroup suffered from a heap-based buffer overflow. CVE-2011-1006 - The cgrulesengd daemon did not verify the origin of netlink messages, allowing local users to spoof events. CVE-2011-1022 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

SuSE 11.1 Security Update : dhcp (SAT Patch Number 4315)

A rogue DHCP server could instruct clients to use a host name that contains shell meta characters. Since many scripts in the system do not expect unusal characters in the system's host name the DHCP client needs to sanitize the host name offered by the server. CVE-2011-0997 %NASLMINLEVEL 70300 C...

SuSE 11.1 Security Update : X11 (SAT Patch Number 4199)

Remote attackers could execute arbitrary commands as root by assigning specially crafted hostnames to X11 clients via XDMCP. CVE-2011-0465 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. Th...

SuSE 11.1 Security Update : freetype2 (SAT Patch Number 4089)

Specially crafted font files could crash applications that use freetype2 to render the fonts. CVE-2010-3814 / CVE-2010-3855 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...