SuSE 10 Security Update : openldap2 (ZYPP Patch Number 4679)

This update fixes multiple flaws that could cause slapd to crash. CVE-2007-5707 / CVE-2007-5708 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29536;...

SuSE 10 Security Update : gnomemeeting (ZYPP Patch Number 3163)

This update fixes format string problems in gnomemeeting which might be used by remote attackers to crash gnomemeeting and on older distributions potentially execute code. CVE-2007-1007 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : pcre (ZYPP Patch Number 4707)

Specially crafted regular expressions could lead to a buffer overflow in the pcre library. Applications using pcre to process regular expressions from untrusted sources could therefore potentially be exploited by attackers to execute arbitrary code. CVE-2006-7230 %NASLMINLEVEL 70300 C Tenable...

SuSE 10 Security Update : ruby (ZYPP Patch Number 4702)

This update of ruby improves the SSL certificate verification process. CVE-2007-5162 / CVE-2007-5770 Prior to this update it was possible to intercept SSL traffic with a man-in-the-middle attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell,...

SuSE 10 Security Update : Mono (ZYPP Patch Number 2377)

By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : poppler (ZYPP Patch Number 4630)

A buffer overflow in the xpdf code contained in poppler could be exploited by attackers to potentially execute arbitrary code. CVE-2007-4352 / CVE-2007-5392 / CVE-2007-5393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : liblcms,liblcms-devel (ZYPP Patch Number 4626)

This update addresses security bugs in liblcms that occurred while parsing ICC profiles in JPEG images. CVE-2007-2741 Remote attackers can exploit this bug to execute arbitrary commands or cause denial-of-service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : quagga (ZYPP Patch Number 3230)

Remote attackers could crash quagga via specially crafted 'UPDATE' messages. CVE-2007-1995 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29567;...

SuSE 10 Security Update : tomcat5 (ZYPP Patch Number 2987)

Certain characters of the URL were not properly filtered. This allowed directory reverse traversal attacks to access the web-root of tomcat. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc';...

SuSE 10 Security Update : avahi (ZYPP Patch Number 3845)

Local attackers could send empty TXT data via D-BUS, causing the avahi daemon to exit. CVE-2007-3372 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

SuSE 10 Security Update : MySQL (ZYPP Patch Number 4376)

This update provides fixes for : - remote triggerable crash. CVE-2007-3780 - query tables without propper authorisation. CVE-2007-3781 - gain update privileges without propper authorisation. CVE-2007-3782 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is ...

SuSE 10 Security Update : Qt3 (ZYPP Patch Number 3898)

Format string bugs in QTextEdit can be exploited via specially crafted HTML tags to potentially execute code. CVE-2007-3388 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SuSE 10 Security Update : ktorrent (ZYPP Patch Number 3049)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384 / CVE-2007-1799. Another bug could be exploited to crash Ktorrent. CVE-2007-1385 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

SuSE 10 Security Update : Samba (ZYPP Patch Number 3829)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : fetchmail (ZYPP Patch Number 4462)

This update fixes a remote denial-of-service attack. CVE-2007-4565 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29426; scriptversion"1.16";...

SuSE 10 Security Update : Qt (ZYPP Patch Number 3047)

qt wongly accepts overly long UTF-8 sequences due to a bug in the UTF-8 decoder. This may lead to security problems unter certain circumstances. The bug for example allows for script tag injection in konqueror. CVE-2007-0242 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text descriptio...

SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 4035)

This update fixes some possible vulnerabilities in the open-iscsi daemon. CVE-2007-3099 / CVE-2007-3100 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29533;...

SuSE 10 Security Update : gimp (ZYPP Patch Number 1920)

A buffer overflow was fixed in the xcf loader in GIMP that allows user-complicit attackers to cause a denial of service crash and possibly execute arbitrary code via an XCF file with a large numaxes value in the VECTORS property. CVE-2006-3404 %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 10 Security Update : IBM Java (ZYPP Patch Number 2461)

This update brings IBM Java 1.4.2 to Service Release 7. It contains several undisclosed security fixes, including the fix for the RSA attack similar to Mitre CVE ID CVE-2006-4790. It also contains timezone updates : - US daylightsaving time update starting 2007. - Western Australia daylight savin...

SuSE 10 Security Update : clamav (ZYPP Patch Number 3081)

The version update to 0.90.2 fixes among other things two security problems. CVE-2007-1745 / CVE-2007-1997 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29400...