SUSE has issued an update for rug. This fixes a security issue and a weakness, which can be exploited by malicious, local users to disclose certain sensitive information and potentially by malicious people to bypass security restrictions.

1) The rug tool does not verify the SSL certificates received from the server. This can potentially be exploited in a man-in-the-middle attack to read traffic and to insert commands.

2) Insecure file permissions of "/etc/ximian/rcd.conf" may disclose the rc password.

Solution
Apply updated packages from the maintenance web.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://lists.suse.com/archive/suse-security-announce/2006-May/0010.html

Deep Links
Links available in Customer Area