SUSE Update for Multiple Packages - Secunia Advisories - Vulnerability Intelligence

SUSE Update for Multiple Packages
Secunia Advisory:	SA28838	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2008-02-08
Last Update:	2008-02-13
Popularity:	4,785 views

Critical:	Moderately critical
Impact:	Security Bypass Manipulation of data Privilege escalation DoS System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	openSUSE 10.2 openSUSE 10.3 SUSE Linux 10.1 SUSE Linux Enterprise Server 10 SUSE Linux Enterprise Server 9 SuSE Linux Openexchange Server 4.x SuSE Linux Standard Server 8

Software:	Novell Open Enterprise Server 1.x

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2006-4484 CVE-2007-2583 CVE-2007-2691 CVE-2007-2692 CVE-2007-4965 CVE-2007-5503 CVE-2007-5794 CVE-2007-5925 CVE-2007-5969 CVE-2007-6109 CVE-2007-6303 CVE-2007-6304 CVE-2007-6427 CVE-2007-6428 CVE-2007-6429 CVE-2008-0123 CVE-2008-0732

Description: SUSE has issued an update for multiple packages. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges and cause a DoS (Denial of Service), by malicious users to manipulate data, gain escalated privileges, and cause a DoS, and by malicious people to manipulate data, bypass certain security restrictions, cause a DoS, and potentially compromise a vulnerable system. For more information: SA25188 SA25301 SA26837 SA27568 SA27670 SA27880 SA28063 SA28532 SA28640 SA28746 This also updates the Sun Java packages, fixes a problem in the command line handling of xemacs, and some vulnerabilities in NX. Solution: Apply updated packages via YaST Online Update or the SUSE FTP server. Changelog: 2008-02-13: Added CVE reference. Original Advisory: http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html Other References: SA25188: http://secunia.com/advisories/25188/ SA25301: http://secunia.com/advisories/25301/ SA26837: http://secunia.com/advisories/26837/ SA27568: http://secunia.com/advisories/27568/ SA27670: http://secunia.com/advisories/27670/ SA27880: http://secunia.com/advisories/27880/ SA28063: http://secunia.com/advisories/28063/ SA28532: http://secunia.com/advisories/28532/ SA28640: http://secunia.com/advisories/28640/ SA28746: http://secunia.com/advisories/28746/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

20th Nov, 2008

New advisories:	24
New vulnerabilities:	48
Updated advisories:	34

Highly // 208 views

Alex Multiple Products File Upload Vulnerability

Moderately // 203 views

ClipShare "chid" SQL Injection Vulnerability

Moderately // 208 views

MauryCMS "c" SQL Injection Vulnerability

Less // 239 views

MyTopix "send" SQL Injection Vulnerability

Less // 264 views

MailScanner "trend-autoupdate" Insecure Temporary Files

Not // 232 views

P3nfs Insecure Temporary Files

Less // 261 views

pam_mount "passwdehd" Insecure Temporary Files

Less // 251 views

refbase "headerMsg" Cross-Site Scripting Vulnerability

Highly // 317 views

imlib2 XPM Processing Buffer Overflow Vulnerability

Less // 258 views

SystemImager "si_mkbootserver" Insecure Temporary Files

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.