openSUSE Security Update : compat-openssl098 (openSUSE-2016-575)

This update for compat-openssl098 fixes the following issues : - CVE-2016-2108: Memory corruption in the ASN.1 encoder bsc977617 - CVE-2016-2105: EVPEncodeUpdate overflow bsc977614 - CVE-2016-2106: EVPEncryptUpdate overflow bsc977615 - CVE-2016-2109: ASN.1 BIO excessive memory allocation bsc97694...

Security update for php5 (important)

This update for php5 fixes the following security issues: - CVE-2015-8838: mysqlnd was vulnerable to BACKRONYM bnc973792. - CVE-2015-8835: SoapClient scall method suffered from a type confusion issue that could have lead to crashes bsc973351 - CVE-2016-2554: A NULL pointer dereference in...

Security update for samba (important)

samba was updated to fix seven security issues. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication bsc973031. - CVE-2016-2111: Domain...

CVE-2015-5969

The mysql-systemd-helper script in the mysql-community-server package before 5.6.28-2.17.1 in openSUSE 13.2 and before 5.6.28-13.1 in openSUSE Leap 42.1 and the mariadb package before 10.0.22-2.21.2 in openSUSE 13.2 and before 10.0.22-3.1 in SUSE Linux Enterprise SLE 12.1 and openSUSE Leap 42.1...

openSUSE Security Update : glibc (openSUSE-2016-224)

This update for glibc fixes the following security issues : - CVE-2015-7547: A stack-based buffer overflow in getaddrinfo allowed remote attackers to cause a crash or execute arbitrary code via crafted and timed DNS responses bsc961721 - CVE-2015-8777: Insufficient checking of LDPOINTERGUARD...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss (SUSE-SU-2016:0338-1)

This update for MozillaFirefox, MozillaFirefox-branding-SLE, mozilla-nss fixes the following issues: bsc963520 Mozilla Firefox was updated to 38.6.0 ESR. Mozilla NSS was updated to 3.20.2. The following vulnerabilities were fixed : - CVE-2016-1930: Memory safety bugs fixed in Firefox ESR 38.6...

openSUSE Security Update : openssh (openSUSE-2016-38)

This update for openssh fixes the following issues : - CVE-2016-0777: A malicious or compromised server could cause the OpenSSH client to expose part or all of the client's private key through the roaming feature bsc961642 - CVE-2016-0778: A malicious or compromised server could could trigger a...

Security update for bind (important)

This update for bind fixes the following security issue: - CVE-2015-8000: Fix remote denial of service by misparsing incoming responses bsc958861. This update was imported from the SUSE:SLE-12-SP1:Update update project...

CVE-2012-0414

The CVE-2012-0414 entry concerns a Cross-site scripting (XSS) vulnerability in the Spacewalk service of SUSE Manager 1.2 for SUSE Linux Enterprise 11 SP1. The issue allows remote attackers to inject arbitrary web script or HTML via an image name. According to the linked references, the vulnerabil...

PT-2013-1491

Name of the Vulnerable Software and Affected Versions SUSE Manager 1.2 for SUSE Linux Enterprise SLE 11 SP1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via an image name. This could potentially lead to unauthorized actions ...

CVE-2010-1325

Summary (CVE-2010-1325) : A CSRF vulnerability affects the apache2-slms package in SUSE Lifecycle Management Server (SLMS) 1.0 on SUSE Linux Enterprise 11 . The issue arises from improper parameter quoting, enabling remote attackers to hijack the authentication of unspecified victims. The availab...

CVE-2010-1507

Vulnerability CVE-2010-1507 affects WebYaST in the yast2-webclient of SUSE Linux Enterprise 11 on the WebYaST appliance. The root cause is a fixed secret key embedded in the appliance image, which enables remote attackers to spoof session cookies by exploiting knowledge of this key. Publicly know...

Linux Kernel 64bit Personality Handling Local DoS Vulnerability

Exploit for linux platform in category dos / poc ============================================================================= Linux Kernel 64bit Personality Handling Local Denial of Service Vulnerability ============================================================================= Vulnerable:...

LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability

No description provided by source. Bugtraq ID: 35451 Class: Boundary Condition Error Published: Jun 21 2009 12:00AM Updated: Nov 12 2009 06:46PM Credit: wololo Vulnerable: Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386...

SUSE Linux 'scsi_discovery tool'不安全临时文件建立漏洞

Bugraq ID: 36887 CVE ID：CVE-2009-1297 SUSE Linux是一款基于linux内核的发行版本。 SUSE Linux 'scsidiscovery tool'工具不安全建立临时文件，本地攻击者可以利用漏洞执行符号链接攻击覆盖任意攻击者指定的文件，造成拒绝服务攻击。 S.u.S.E. SLE SDK 10 SP2 S.u.S.E. SLE 11 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 用户可联系供应商获得最新版本：...

CVE-2009-1297

The CVE-2009-1297 issue affects open-iscsi’s iscsi_discovery in openSUSE/OpenSUSE 10.3–11.1 and SUSE/SLE 10 SP2–11. The root cause is unsafe creation of temporary files with a predictable name, enabling a local attacker to perform a symlink attack to overwrite arbitrary files. Several advisories ...

CVE-2009-2707

The CVE-2009-2707 issue affects SUSE Linux Enterprise Server 10 SP2 on Itanium IA64, where the ia32el IA32 emulation layer can be leveraged by a local 32-bit x86 application to cause a kernel crash (DoS). The vulnerability is described as an unspecified defect in ia32el prior to version 7042_7022...

Linux Kernel Intel 32bit仿真模式本地拒绝服务漏洞

Bugraq ID: 36393 CVE ID：CVE-2009-2707 Linux是一款开放源代码的操作系统。 Linux内核Intel 32位仿真模式存在设计问题，本地攻击者可以用漏洞使系统崩溃，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 S.u.S.E. SLE 10 Linux kernel 厂商解决方案 用户可联系供应商获得最新程序： http://www.kernel.org/...

CVE-2008-2025

CVE-2008-2025 is an XSS vulnerability in Apache Struts (prior to 1.2.9-162.31.1 on SUSE SLE 11, prior to 1.2.9-108.2 on SUSE openSUSE 10.3, prior to 1.2.9-198.2 on SUSE openSUSE 11.0, and before 1.2.9-162.163.2 on SUSE openSUSE 11.1) caused by insufficient quoting of parameters. Remote attackers ...

SuSE Update for kernel-bigsmp SUSE-SA:2007:018

Check for the Version of kernel-bigsmp OpenVAS Vulnerability Test $Id: gbsuse2007018.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for kernel-bigsmp SUSE-SA:2007:018 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is...