Secunia

Description

SUSE has issued an update for multiple packages. This fixes some vulnerabilities, which can be exploited by malicious, local users to manipulate data, cause a DoS (Denial of Service), and gain escalated privileges, and by malicious people to manipulate data, conduct cross-site scripting attacks, cause a DoS, and compromise a vulnerable system.

This also fixes a vulnerability in cron, which is caused due to insecure permissions set on certain files and an improper check of hard links in database.c. This can be exploited to prevent the processing of cron files by creating hard links to system or user cron files. Another bug related to symlinks can be exploited by malicious, local users to manipulate to crontabs of other users.

For more information:
SA23660
SA24444
SA24486
SA24528
SA24801
SA24886

Solution
Apply updated packages.
Further details available in Customer Area

Original Advisory
http://www.novell.com/linux/security/advisories/2007_007_suse.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area