SUSE-SA:2003:024: openssl

The remote host is missing the patch for the advisory SUSE-SA:2003:024 openssl. Researchers from the University of Stanford have discovered certain weaknesses in OpenSSL's RSA decryption algorithm. It allows remote attackers to compute the private RSA key of a server by observing its timing...

SUSE-SA:2003:035: sendmail

The remote host is missing the patch for the advisory SUSE-SA:2003:035 sendmail. The well known and widely used MTA sendmail is vulnerable to a remote denial-of-service attack in version 8.12.8 and earlier but not before 8.12. The bug exists in the DNS map code. This feature is enabled by...

SUSE-SA:2003:032: wuftpd

The remote host is missing the patch for the advisory SUSE-SA:2003:032 wuftpd. Janusz Niewiadomski and Wojciech Purczynski of iSEC Security Research have found a single byte buffer overflow in the Washington University ftp daemon wuftpd, a widely used ftp server for Linux-like systems. It is yet...

SUSE-SA:2002:048: cyrus-imapd

The remote host is missing the patch for the advisory SUSE-SA:2002:048 cyrus-imapd. The cyrus imapd contains a buffer overflow which could be exploited by remote attackers prior to logging in. Attackers could generate oversized error messages and overflow buffers inside imapd. Additionally to thi...

SUSE-SA:2003:0007: cvs

The remote host is missing the patch for the advisory SUSE-SA:2003:0007 cvs. CVS Concurrent Versions System is a version control system which helps to manage concurrent editing of files by various authors. Stefan Esser of e-matters reported a 'double free' bug in CVS server code for handling...

SUSE-SA:2003:020: mutt

The remote host is missing the patch for the advisory SUSE-SA:2003:020 mutt. Mutt is a text-based Mail User Agent MUA. The IMAP-code of mutt is vulnerable to a buffer overflow that can be exploited by a malicious IMAP-server to crash mutt or even execute arbitrary code with the privileges of the...

SuSE-SA:2004:008: cvs

The remote host is missing the patch for the advisory SuSE-SA:2004:008 cvs. The Concurrent Versions System CVS offers tools which allow developers to share and maintain large software projects. During the analyzation of the CVS protocol and their implementation, the SuSE Security Team discovered ...

SuSE-SA:2003:045: hylafax

The remote host is missing the patch for the advisory SuSE-SA:2003:045 hylafax. Hylafax is an Open Source fax server which allows sharing of fax equipment among computers by offering its service to clients by a protocol similar to FTP. The SuSE Security Team found a format bug condition during a...

SUSE-SA:2004:022: samba

The remote host is missing the patch for the advisory SUSE-SA:2004:022 samba. The Samba Web Administration Tool SWAT was found vulnerable to a buffer overflow in its base64 code. This buffer overflow can possibly be exploited remotely before any authentication took place to execute arbitrary code...

SuSE-SA:2004:004: gaim

The remote host is missing the patch for the advisory SuSE-SA:2004:004 gaim. Gaim is a multi-protocol instant-messaging client. Stefan Esser found 12 vulnerabilities in gaim that can lead to a remote system compromise with the privileges of the user running GAIM. The GAIM package that SUSE LINUX...

SUSE-SA:2002:043: traceroute-nanog/nkitb

The remote host is missing the patch for the advisory SUSE-SA:2002:043 traceroute-nanog/nkitb. Traceroute is a tool that can be used to track packets in a TCP/IP network to determine it's route or to find out about not working routers. Traceroute-nanog requires root privilege to open a raw socket...

SuSE-SA:2004:018: subversion

The remote host is missing the patch for the advisory SuSE-SA:2004:018 subversion. Subversion is a version control system like the well known CVS. The subversion code is vulnerable to a remotely exploitable buffer overflow on the heap. The bug appears before any authentication took place. An...

SUSE-SA:2003:036: pam_smb

The remote host is missing the patch for the advisory SUSE-SA:2003:036 pamsmb. The PAM module and server pamsmb allows users of Linux systems to be authenticated by querying an NT server. Dave Airlie informed us about a bug in the authentication code of pamsmb that allows a remote attacker to gai...

SuSE-SA:2004:012: mc

The remote host is missing the patch for the advisory SuSE-SA:2004:012 mc. The Midnight Commander mc is a file manager for the console. The mc code is vulnerable to several security related bugs like buffer overflows, incorrect format string handling and insecure usage of temporary files. These...

SUSE-SA:2002:036: mod_php4

The remote host is missing the patch for the advisory SUSE-SA:2002:036 modphp4. PHP is a well known and widely used web programming language. If a PHP script runs in 'safe mode' several restrictions are applied to it including limits on execution of external programs. An attacker can pass shell...

SuSE-SA:2003:044: thttpd

The remote host is missing the patch for the advisory SuSE-SA:2003:044 thttpd. Two vulnerabilities were found in the 'tiny' web-server thttpd. The first bug is a buffer overflow that can be exploited remotely to overwrite the EBP register of the stack. Due to memory-alignment of the stack done by...

SUSE-SA:2002:035: hylafax

The remote host is missing the patch for the advisory SUSE-SA:2002:035 hylafax. HylaFAX is a client-server architecture for receiving and sending facsimiles. The logging function of faxgetty prior version 4.1.3 was vulnerable to a format string bug when handling the TSI value of a received...

SUSE-SA:2003:040: sendmail, sendmail-tls

The remote host is missing the patch for the advisory SUSE-SA:2003:040 sendmail, sendmail-tls. sendmail is the most widely used mail transport agent MTA in the internet. A remotely exploitable buffer overflow has been found in all versions of sendmail that come with SUSE products. These versions...

SUSE-SA:2003:0008: imp

The remote host is missing the patch for the advisory SUSE-SA:2003:0008 imp. IMP is a well known PHP-based web-mail system. Some SQL-injection vulnerabilities were found in IMP 2.x that allow an attacker to access the underlying database. No authentication is needed to exploit this bug. An attack...

SUSE-SA:2003:0004: libpng

The remote host is missing the patch for the advisory SUSE-SA:2003:0004 libpng. The library libpng provides several functions to encode, decode and manipulate Portable Network Graphics PNG image files. Due to wrong calculation of some loop offset values a buffer overflow can occur. The buffer...