Secunia Security Advisory - SUSE has issued an update for multiple packages. This fixes some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions, disclose potentially sensitive information, or potentially gain escalated privileges, by malicious users to cause a DoS (Denial of Service), and by malicious people to bypass certain security restrictions, disclose potentially sensitive information, cause a DoS, or potentially compromise a vulnerable system.
1ed3b51b1b3d4e63ba7d5643b9f40f1599a2a0b8d593a43646b574b96b2788af
----------------------------------------------------------------------
Do you need accurate and reliable IDS / IPS / AV detection rules?
Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/
----------------------------------------------------------------------
TITLE:
SUSE Update for Multiple Packages
SECUNIA ADVISORY ID:
SA32759
VERIFY ADVISORY:
http://secunia.com/advisories/32759/
CRITICAL:
Moderately critical
IMPACT:
Security Bypass, DoS, System access
WHERE:
>From remote
OPERATING SYSTEM:
SUSE Linux Enterprise Server 10
http://secunia.com/advisories/product/12192/
openSUSE 11.0
http://secunia.com/advisories/product/19180/
openSUSE 10.3
http://secunia.com/advisories/product/16124/
openSUSE 10.2
http://secunia.com/advisories/product/13375/
SUSE Linux Enterprise Server 9
http://secunia.com/advisories/product/4118/
SOFTWARE:
Novell Open Enterprise Server 1.x
http://secunia.com/advisories/product/4664/
DESCRIPTION:
SUSE has issued an update for multiple packages. This fixes some
vulnerabilities, which can be exploited by malicious, local users to
bypass certain security restrictions, disclose potentially sensitive
information, or potentially gain escalated privileges, by malicious
users to cause a DoS (Denial of Service), and by malicious people to
bypass certain security restrictions, disclose potentially sensitive
information, cause a DoS, or potentially compromise a vulnerable
system.
For more information:
SA23073
SA25895
SA25955
SA26389
SA30134
SA30580
SA31366
SA31450
SA31478
SA31769
SA32163
SA32270
SOLUTION:
Updated packages are available via YaST Online Update or the SUSE FTP
server.
ORIGINAL ADVISORY:
SUSE-SR:2008:025:
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
OTHER REFERENCES:
SA23073:
http://secunia.com/advisories/23073/
SA25895:
http://secunia.com/advisories/25895/
SA25955:
http://secunia.com/advisories/25955/
SA26389:
http://secunia.com/advisories/26389/
SA30134:
http://secunia.com/advisories/30134/
SA30580:
http://secunia.com/advisories/30580/
SA31366:
http://secunia.com/advisories/31366/
SA31450:
http://secunia.com/advisories/31450/
SA31478:
http://secunia.com/advisories/31478/
SA31769:
http://secunia.com/advisories/31769/
SA32163:
http://secunia.com/advisories/32163/
SA32270:
http://secunia.com/advisories/32270/
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------