|
SUSE Updates for Multiple Packages
|
|
Secunia Advisory:
|
SA19130
|
|
|
Release Date:
|
2006-03-06
|
|
Popularity:
|
7,949 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
Cross Site Scripting
Manipulation of data
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | SuSE eMail Server 3.x
SUSE Linux 10
SuSE Linux 7.x
SuSE Linux 8.x
SuSE Linux 9.0
SuSE Linux 9.1
SUSE Linux 9.2
SUSE Linux 9.3
SuSE Linux Connectivity Server
SuSE Linux Database Server
SuSE Linux Desktop 1.x
SuSE Linux Enterprise Server 7
SuSE Linux Enterprise Server 8
SUSE Linux Enterprise Server 9
SuSE Linux Firewall on CD/Admin host
SuSE Linux Office Server
SuSE Linux Openexchange Server 4.x
SuSE Linux Standard Server 8
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2002-0399
CVE-2005-1918
CVE-2005-2337
CVE-2005-3313
CVE-2006-0188
CVE-2006-0195
CVE-2006-0300
CVE-2006-0377
CVE-2006-0455
CVE-2006-0709
CVE-2006-0804
CVE-2006-0855
|
|
Description:
SUSE has issued an update for multiple packages. This fixes some vulnerabilities, which can be exploited by malicious users to manipulate certain information and by malicious people to conduct cross-site scripting attacks, cause a DoS (Denial of Service), bypass certain security restrictions, to cause files to be extracted to arbitrary locations on a user's system, to trick users into visiting a malicious website by obfuscating URLs displayed in the status bar, and to compromise a user's system.
For more information:
SA17370
SA19002
SA16904
SA18796
SA18985
SA18845
SA18973
SA18988
SA17571
Note: An off-by-one error in Tin has also been fixed.
Solution:
Apply updated packages.
Updated packages are available using YaST Online Update or via the SUSE FTP site.
Original Advisory:
http://www.novell.com/linux/security/advisories/2006_05_sr.html
Other References:
SA17370:
http://secunia.com/advisories/17370/
SA19002:
http://secunia.com/advisories/19002/
SA16904:
http://secunia.com/advisories/16904/
SA18796:
http://secunia.com/advisories/18796/
SA18985:
http://secunia.com/advisories/18985/
SA18845:
http://secunia.com/advisories/18845/
SA18973:
http://secunia.com/advisories/18973/
SA18988:
http://secunia.com/advisories/18988/
SA17571:
http://secunia.com/advisories/17571/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
