SuSE 10 Security Update : screen (ZYPP Patch Number 2199)

A special formed UTF-8 sequence in text could be used to crash the terminal multitasker screen by overwriting memory in the heap. This is potentially exploitable to execute code. CVE-2006-4573 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, In...

SuSE 10 Security Update : quagga (ZYPP Patch Number 3230)

Remote attackers could crash quagga via specially crafted 'UPDATE' messages. CVE-2007-1995 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29567;...

SuSE 10 Security Update : libpng (ZYPP Patch Number 4627)

Speciall crafted png files could crash applications when attempting to open such a file. CVE-2007-5269 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29509;...

SuSE 10 Security Update : libgtop (ZYPP Patch Number 2511)

This update fixes a buffer overflow in libgtop's glibtopgetprocmaps function. CVE-2007-0235 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29502;...

SuSE 10 Security Update : gpg (ZYPP Patch Number 2994)

When printing a text stream with a GPG signature it was possible for an attacker to create a stream with 'unsigned text, signed text' where both unsigned and signed text would be shown without distinction which one was signed and which part wasn't. This is tracked by the Mitre CVE ID CVE-2007-126...

SuSE 10 Security Update : IBM Java 1.4.2 (ZYPP Patch Number 4542)

The IBM Java JRE/SDK has been brought to release 1.4.2 SR9, containing several bugfixes, including the following security fixes : - A buffer overflow vulnerability in the image parsing code in the JavaTM Runtime Environment may allow an untrusted applet or application to elevate its privileges. F...

SuSE 10 Security Update : Postfix (ZYPP Patch Number 4520)

The SuSEconfig script for postfix doesn't honor the value of SMTPDLISTENREMOTE in /etc/sysconfig/mail and therefore create a config that makes postfix listen on all network interfaces. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : PHP5 (ZYPP Patch Number 3290)

This Update fixes numerous vulnerabilities in PHP. Most of them were made public during the 'Month of PHP Bugs'. The vulnerabilities potentially lead to crashes, information leaks or even execution of malicious code. CVE-2007-1380 / CVE-2007-0988 / CVE-2007-1375 / CVE-2007-1521 / CVE-2007-1376 /...

SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 3099)

A bug in the IKE daemon 'racoon' allowed remote attackers shut down established tunnels. CVE-2007-1841 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29466;...

SuSE 10 Security Update : Cups (ZYPP Patch Number 4667)

A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code. CVE-2007-4352 / CVE-2007-5392 / CVE-2007-5393 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : ktorrent (ZYPP Patch Number 3049)

Ktorrent insufficiently validated the target file name. A malicious Server could therefore overwrite arbitary files of the user CVE-2007-1384 / CVE-2007-1799. Another bug could be exploited to crash Ktorrent. CVE-2007-1385 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description ...

SuSE 10 Security Update : xpdf-tools (ZYPP Patch Number 2474)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE 10 Security Update : librpcsecgss (ZYPP Patch Number 4601)

This update fixes a security problem in the librpcsecgss library used by NFSv4 also found in krb5. A invalid packet could underflow and potentially cause memory corruption and code execution. CVE-2007-3999 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...

SuSE 10 Security Update : Samba (ZYPP Patch Number 3829)

The previous security fix for CVE-2007-2447 missed one character in the shell escape handling. Also fixed were some regressions introduced by the previous update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : nagios plugins (ZYPP Patch Number 4624)

fix possible buffer overflow during HTTP Location header parsing in checkhttp CVE-2007-5198 fix possible buffer overflow during snmpget parsing in checksnmp. CVE-2007-5623 if !definedfunc"nasllevel" || nasllevel = 70000 && nasllevel = 70200 && nasllevel = 80000 && nasllevel 80502 exit0; C Tenable...

SuSE 10 Security Update : gnutls (ZYPP Patch Number 2117)

A security problem was fixed in the GNU TLS library, where excess data was not checked during signature checking with RSA keys with exponent 3. This problem could be used to fake those RSA signatures. CVE-2006-4790 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...