266 matches found
SuSE9 Security Update : yast2-backup (YOU Patch Number 12279)
This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
SuSE9 Security Update : SLES9-SP4: Security update for yast2-mail-server (YOU Patch Number 11602)
If you go to YaST -- Mail Server -- FetchMail and select add account window. While entering the password for the remote user, it shows the password. Now the password field echoes '', instead of plain text. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...
SuSE 11 Security Update : YaST2 LDAP module (SAT Patch Number 896)
The YaST2 LDAP module in SUSE Linux Enterprise Server 11 did not initialize the firewall configuration during second stage installation. Therefore, if an online update required reboot during second stage firewall settings were not applied and the firewall turned off. CVE-2009-1648 %NASLMINLEVEL...
openSUSE Security Update : yast2-backup (yast2-backup-280)
This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update yast2-backup-280...
Code injection
The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...
CVE-2009-1648
The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...
CVE-2009-1648
CVE-2009-1648 affects the YaST2 LDAP module in the SUSE Linux Enterprise Server 11 package yast2-ldap-server. The underlying issue is that the firewall is not enabled in certain reboots during online updates, which can allow remote attackers to access network services. Publicly referenced materia...
CVE-2009-1648
The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...
CVE-2009-1648: Undefined Security Weakness
The YaST2 LDAP module in yast2-ldap-server on SUSE Linux Enterprise Server 11 aka SLE11 does not enable the firewall in certain circumstances involving reboots during online updates, which makes it easier for remote attackers to access network services...
SuSE Update for yast2-backup SUSE-SA:2008:054
Check for the Version of yast2-backup OpenVAS Vulnerability Test $Id: gbsuse2008054.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for yast2-backup SUSE-SA:2008:054 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...
openSUSE 10 Security Update : yast2-backup (yast2-backup-5733)
This updated of yast2-backup fixes a sellcode injection vulnerability and improves handling of symlinks for the backup process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update yast2-backup-573...
CVE-2008-4636
yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...
CVE-2008-4636
yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...
CVE-2008-4636
CVE-2008-4636 affects yast2-backup versions 2.14.2–2.16.6 on SUSE Linux and Novell Linux. The root cause is shell metacharacters in filenames used by the backup process, which can allow local users to gain privileges (C/C and I/C/A impacts). The cited resources describe a security update for SUSE...
CVE-2008-4636
yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...
CVE-2008-4636: Improper Neutralization of Special Elements used in an OS Command
yast2-backup 2.14.2 through 2.16.6 on SUSE Linux and Novell Linux allows local users to gain privileges via shell metacharacters in filenames used by the backup process...
SuSE 10 Security Update : yast2-backup (ZYPP Patch Number 5739)
This updated of yast2-backup fixes a shellcode injection vulnerability and improves handling of symlinks for the backup process. CVE-2008-4636 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...
SuSE 10 Security Update : Xen (ZYPP Patch Number 2155)
This update includes both bug fixes and security fixes for Xen. A summary of the fixes appears below: 151105 - Fix various 'leaks' of loopback devices w/ domUloader 162865 - Re-send all page tables when migrating to avoid oops 167145 - Add status messages during file backed disk creation 176369 -...
SuSE 10 Security Update : YaST2 (ZYPP Patch Number 4623)
This update fixes a security bug in yast2-core that allowed local attackers to provide malicious yast2 modules to yast2 that are executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. Thanks to Stefan Nordhausen for reporting th...