SUSE-SA:2006:024: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2006:024 php4,php5. This update fixes the following security issues in the scripting languages PHP4 and PHP5: - copy and tempnam functions could bypass openbasedir restrictions CVE-2006-1494 - Cross-Site-Scripting XSS bug in phpinfo...

SUSE-SA:2006:023: xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2006:023 xorg-x11-server. Miscalculation of a buffer size in the X Render extension of the X.Org X11 server could potentially be exploited by users to cause a buffer overflow and run code with elevated privileges. %NASLMINLEVEL 70300 C...

SUSE-SA:2006:025: cyrus-sasl-digestmd5

The remote host is missing the patch for the advisory SUSE-SA:2006:025 cyrus-sasl-digestmd5. If a server or client is using DIGEST-MD5 authentication via the cyrus-sasl libraries it is possible to cause a denial of service attack against the other side client or server by leaving out the 'realm='...

SUSE-SA:2006:022: MozillaThunderbird

The remote host is missing the patch for the advisory SUSE-SA:2006:022 MozillaThunderbird. Various security bugs have been fixed in Mozilla Thunderbird, bringing it up to bugfix level of version 1.0.8. This also catches up on earlier Thunderbird security releases. %NASLMINLEVEL 70300 C Tenable...

SUSE-SA:2006:020: clamav

The remote host is missing the patch for the advisory SUSE-SA:2006:020 clamav. Clamav was updated to version 0.88.1 to fix the following security problems: - An integer overflow in the PE header parser CVE-2006-1614. - Format string bugs in the logging code could potentially be exploited to execu...

SUSE-SA:2006:017: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2006:017 sendmail. The popular MTA sendmail is vulnerable to a race condition when handling signals. Under certain circumstances this bug can be exploited by an attacker to execute commands remotely. Sendmail was the default MTA in SuS...

SUSE-SA:2006:015: flash-player

The remote host is missing the patch for the advisory SUSE-SA:2006:015 flash-player. A critical security vulnerability has been identified in the Adobe Macromedia Flash Player that allows an attacker who successfully exploits these vulnerabilities to take control of the application running the...

SUSE-SA:2006:016: xorg-x11-server

The remote host is missing the patch for the advisory SUSE-SA:2006:016 xorg-x11-server. A programming flaw in the X.Org X Server allows local attackers to gain root access when the server is setuid root, as is the default in SUSE Linux 10.0. This flaw was spotted by the Coverity project. Only SUS...

SUSE-SA:2006:013: gpg,liby2util

The remote host is missing the patch for the advisory SUSE-SA:2006:013 gpg,liby2util. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2006:013 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2006:011: heimdal

The remote host is missing the patch for the advisory SUSE-SA:2006:011 heimdal. Heimdal is a Kerberos 5 implementation from the Royal Institut of Techno- logy in Stockholm. This update fixes two bugs in heimdal. The first one occurs in the rsh daemon and allows an authenticated malicious user to...

SUSE-SA:2006:009: gpg,liby2util

The remote host is missing the patch for the advisory SUSE-SA:2006:009 gpg,liby2util. With certain handcraftable signatures GPG was returning a 0 valid signature when used on command-line with option --verify. This only affects GPG version 1.4.x, so it only affects SUSE Linux 9.3 and 10.0. Other...

SUSE-SA:2006:007: binutils,kdelibs3,kdegraphics3,koffice,dia,lyx

The remote host is missing the patch for the advisory SUSE-SA:2006:007 binutils,kdelibs3,kdegraphics3,koffice,dia,lyx. A SUSE specific patch to the GNU linker 'ld' removes redundant RPATH and RUNPATH components when linking binaries. Due to a bug in this routine ld occasionally left empty RPATH...

SUSE-SA:2006:003: kdelibs3

The remote host is missing the patch for the advisory SUSE-SA:2006:003 kdelibs3. Maksim Orlovich discovered a bug in the JavaScript interpreter used by Konqueror. UTF-8 encoded URLs could lead to a buffer overflow that causes the browser to crash or execute arbitrary code. Attackers could trick...

SUSE-SA:2006:001: xpdf,kpdf,gpdf,kword

The remote host is missing the patch for the advisory SUSE-SA:2006:001 xpdf,kpdf,gpdf,kword. 'infamous41md', Chris Evans and Dirk Mueller discovered multiple places in xpdf code where integer variables are insufficiently checked for range or overflow. Specially crafted PDF files could lead to...

SUSE-SA:2005:070: ipsec-tools,freeswan,openswan

The remote host is missing the patch for the advisory SUSE-SA:2005:070 ipsec-tools,freeswan,openswan. Openswan, Freeswan and raccoon ipsec-tools have been updated to fix crashes in aggressive mode. An attacker might send specially crafted packets that can crash racoon or Pluto. The ipsec-tools /...

SUSE-SA:2005:071: perl

The remote host is missing the patch for the advisory SUSE-SA:2005:071 perl. Integer overflows in the format string functionality in Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap...

SUSE-SA:2005:069: php4,php5

The remote host is missing the patch for the advisory SUSE-SA:2005:069 php4,php5. Updated PHP packages fix the following security issues: - Stefan Esser found out that a bug in parsestr could lead to activation of registerglobals CVE-2005-3389 and additionally that file uploads could overwrite...

SUSE-SA:2005:065: gtk2, gdk-pixbuf

The remote host is missing the patch for the advisory SUSE-SA:2005:065 gtk2, gdk-pixbuf. The image loading library of the gdk-pixbug/gtk2 package is vulnerable to several security-related bugs. This makes every application mostly GNOME applications which is linked against this library vulnerable...

SUSE-SA:2005:066: phpMyAdmin

The remote host is missing the patch for the advisory SUSE-SA:2005:066 phpMyAdmin. The MySQL configuration frontend phpMyAdmin was updated to fix the following security problems which can be remotely exploited: - Multiple cross-site scripting XSS bugs CVE-2005-3301, CVE-2005-2869, PMASA-2005-5. -...

SUSE-SA:2005:064: pwdutils, shadow

The remote host is missing the patch for the advisory SUSE-SA:2005:064 pwdutils, shadow. Thomas Gerisch found that the setuid 'chfn' program contained in the pwdutils suite insufficiently checks it's arguments when changing the GECOS field. This bug leads to a trivially exploitable local privileg...