SuSE 11.1 Security Update : perl (SAT Patch Number 3804)

Multiple header injection problems in the CGI module of perl have been fixed. They allowed to inject HTTP headers in responses. CVE-2010-2761 / CVE-2010-4410 / CVE-2010-4411 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 3103)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

SuSE 11.1 Security Update : Python (SAT Patch Number 3493)

The following issues have been fixed : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop module. CVE-2010-2089 / CVE-2010-1634 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11.1 Security Update : libpoppler (SAT Patch Number 3338)

Specially crafted PDF files could crash poppler or potentially even cause execution of arbitrary code CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

SuSE 11.1 Security Update : libpng12-0 (SAT Patch Number 2473)

Denial of service while decompressing a highly compressed huge ancillary chunk has been fixed in libpng. CVE-2010-0205 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 Security Update : wireshark (SAT Patch Number 2082)

This update of wireshark fixes : - Remote attackers could potentially trigger a buffer overflow in the Daintree SNA file parser. CVE-2009-4376 - Specially crafted packets could cause the SMB and SMB2 dissector to crash wireshark. CVE-2009-4377 - Unspecified vulnerability in the Infiniband dissect...

SuSE 11.1 Security Update : IBM Java 1.4.2 (SAT Patch Number 3528)

IBM Java 1.4.2 was updated to SR13 FP6 to fix various bugs and security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL 3000...

SuSE 11.1 Security Update : GDM (SAT Patch Number 3222)

This update provides the following fixes : - 633655: Change the way dbus properties are exported to avoid write access to read-only properties. - 627893: Upon relogin gdm displays the Windows domain, but tries to authenticate locally - 490621: Windows domain not remembered from previous log-in -...

SuSE 11.1 Security Update : evince (SAT Patch Number 3769)

Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : opensc (SAT Patch Number 3729)

Specially crafted smart cards could cause a buffer overflow in opensc. CVE-2010-4523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if NASLLEVEL...

SuSE 11.1 Security Update : LVM2 (SAT Patch Number 2982)

clvmd, when running, allowed unprivileged local users to issue arbitrary lvm commands CVE-2010-2526 via incorrect permissions. This has been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : xpdf (SAT Patch Number 3377)

A specially crafted PDF files could crash xpdf or potentially even cause execution of arbitrary code. CVE-2010-3702 / CVE-2010-3703 / CVE-2010-3704 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11.1 Security Update : moonlight-plugin (SAT Patch Number 3606)

This update of moonlight does not allow abuse of mutable Strings to execute arbitrary code anymore. CVE-2010-4254 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyrigh...

SuSE 11.1 Security Update : pcsc-lite (SAT Patch Number 2670)

This update of pcsc-lite fixes a local vulnerability stack overflow which allowed every user with write-access to '/var/run/pcscd/pcscd.comm' to gain root privileges. CVE-2010-0407 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

SuSE 11.1 Security Update : ed (SAT Patch Number 3792)

This update fixes a heap-based buffer overflow in ed which can be exploited remotely only with user-assistance. CVE-2008-3916: CVSS v2 Base Score: 9.3 HIGH AV:N/AC:M/Au:N/C:C/I:C/A:C: Buffer Errors. CWE-119 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

SuSE 11 / 11.1 Security Update : GnuTLS (SAT Patch Numbers 3650 / 3651)

The SSL-renegotiation 'authentication gap' has been fixed in GnuTLS. CVE-2009-3555 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 Security Update : Python (SAT Patch Number 3491)

The following issues have been fixed : - a race condition in the accept implementation of smtpd.py could lead to a denial of service. CVE-2010-3493 - integer overflows and insufficient size checks could crash the audioop module. CVE-2010-2089 / CVE-2010-1634 %NASLMINLEVEL 70300 C Tenable Network...

SuSE 11 / 11.1 Security Update : clamav (SAT Patch Numbers 3645 / 3646)

This is an update of clamav to version 0.96.5 to fix : - Denial of service bugs while parsing PDFs. CVE-2010-4260 - Memory corruption due to an off-by-one error within the iconcb function CVE-2010-4261 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

SuSE 11 Security Update : kdelibs (SAT Patch Number 3450)

An invalid character reference causing a buffer overflow in khtml has been fixed in the kdelibs package. CVE-2009-1725 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update...

SuSE 11 / 11.1 Security Update : CUPS (SAT Patch Numbers 3575 / 3576)

This updates fix several bugs, but only the security fixes are listed here : - Special IPP requests allow to crash cupsd remotely. CVE-2010-2941: CVSS v2 Base Score: 3.3 AV:A/AC:L/Au:N/C:N/I:N/A:P: CWE-399 - A NULL pointer dereference exists in the WriteProlog function of the texttops image filte...