SUSE SLED12 / SLES12 Security Update : bind (SUSE-SU-2015:1481-1)

The nameserver bind was updated to fix a remote denial of service crash attack against bind nameservers doing validation on DNSSEC signed records. CVE-2015-5722, bsc944066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE SLED11 / SLES11 Security Update : MySQL (SUSE-SU-2015:1177-1) (Logjam)

This update fixes the following security issue : Logjam Attack: MySQL uses 512 bit dh groups in SSL bnc934789 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as mu...

SUSE SLED11 Security Update : gstreamer-0_10-plugins-bad (SUSE-SU-2015:0921-1)

gstreamer-010-plugins-bad was updated to fix a security issue, a buffer overflow in mp4 parsing bnc927559 CVE-2015-0797. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and form...

SUSE SLED12 / SLES12 Security Update : update for rsyslog (SUSE-SU-2014:1438-1)

This update for rsyslog provides the following fixes : - Fixed remote PRI DoS vulnerability patch CVE-2014-3683, bnc899756 - Removed broken, unsupported and dropped by upstream zpipe utility from rsyslog-diag-tools package bnc890228 Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : cups-filters (SUSE-SU-2015:0805-1)

cups-filters was updated to fix one security issue. This security issue was fixed : - CVE-2015-2265: Remote command execution in removebadchars bnc921753. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : mutt (SUSE-SU-2015:0012-1)

mutt was updated to fix one security issue. This security issue was fixed : - Heap-based buffer overflow in muttsubstrdup CVE-2014-9116. The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block...

SUSE SLED11 / SLES11 Security Update : libfreebl3 (SUSE-SU-2013:1920-1)

Mozilla NSS has been updated to the 3.15.3.1 security release. The update blacklists an intermediate CA that was abused to create man in the middle certificates. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

SUSE SLED12 / SLES12 Security Update : python, python-base, python-doc (SUSE-SU-2014:1511-1)

python, python-base, python-doc was updated to fix one security issue. This security issue was fixed : - Fixed potential buffer overflow in buffer CVE-2014-7185. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

The vulnerability of the OpenSUSE operating system allows malicious actors to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the yast2-backup package in the OpenSUSE operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

CVE-2012-0425

LanItems.ycp in savey2logs in yast2-network before 2.24.4 in SUSE YaST writes cleartext Wi-Fi credentials to the y2log log file, which allows context-dependent attackers to obtain sensitive information by reading the 1 WIRELESSWPAPASSWORD or 2 WIRELESSCLIENTKEYPASSWORD field...

WebYaST Web Client Detection

WebYaST web client, a web interface for YaST, was detected on the remote host. YaST is used for administration of hosts running SUSE Linux operating systems. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62966; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

SuSE 11.1 Security Update : update-test-security (2011-11-18) (deprecated)

This is a fake security update for testing purposes. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. @DEPRECATED@ This script has been deprecated as the associated patch is not actually a security fix. Disabled on 2013/12/05...

SuSE 11.2 Security Update: MozillaThunderbird (2010-06-22)

Mozilla Thunderbird was updated to version 3.0.5, fixing lots of security issues. Mozilla has so far not communicated what vulnerabilities were fixed, the list will appear on: http://www.mozilla.org/security/known-vulnerabilities/thunde rbird30.html %NASLMINLEVEL 70300 C Tenable Network Security,...

SuSE 11 Security Update : Linux kernel (SAT Patch Numbers 1754 / 1760)

Indications Everyone using the Linux Kernel on x8664 architecture should update. Contraindications None. Problem description The SUSE Linux Enterprise 11 Kernel was updated to 2.6.27.42 fixing various bugs and security issues. The following security issues were fixed : - A underflow in the e1000...

SuSE 11.2 Security Update: kmps (2009-10-28)

This update contains kernel module packages for the openSUSE 11.2 RC1 test kernel update. It contains all kernel module packages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if !...

SuSE9 Security Update : MySQL (YOU Patch Number 12456)

This update is provided as RPM packages that can easily be installed onto a running system by using the YaST online update module. - the COMCREATEDB and COMDROPDB suffered from format string vulnerabilities. CVE-2009-2446 - the command line client was prone to cross-site scripting XSS attacks...

SuSE 11.2 Security Update: update-test-security (2009-05-05) (deprecated)

64937: Release tracking dummy bug for hmuelle %NASLMINLEVEL 999999 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. @DEPRECATED@ This script has been deprecated as the associated patch is not actually a security fix. Disabled on 2014/11/24...

SuSE linux 9.0 YaST config Skribt Local Exploit

No description provided by source. include stdio.h include unistd.h include string.h define PATH "/tmp/tmp.SuSEconfig.gnome-filesystem." define START 1 define END 33000 int mainint argc, char argv int i; char buf150; printf"\tSuSE 9.0 YaST script SuSEconfig.gnome-filesystem exploit\n";...

SuSE YaST模块搜索路径本地特权提升漏洞

SuSE YaST是一款中心管理和安全工具。 SuSE YaST处理搜索路径存在问题，本地攻击者可以利用漏洞提升特权。 SuSE YaST允许本地攻击者提供恶意的yast2模块给Yast2，可导致以ROOT特权执行，要触发此漏洞，需要root在不安全的/tmp之类的目录中执行yast2，因此模块最开始是搜索当前工作目录。 S.u.S.E. YaST2 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x8664 + S.u.S.E. Linux Personal 9.0 +...

CVE-2005-4772

liby2util in Yet another Setup Tool YaST in SUSE Linux before 20051007 preserves permissions and ownerships when copying a remote repository, which might allow local users to read or modify sensitive files, possibly giving local users the ability to exploit CVE-2005-3013...