<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:aix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix" xmlns:hpux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:linux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:macos-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:sol-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:win-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 mcafee-pa-oval-definitions-schema-1.0.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris solaris-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#macos macos-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux hpux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#aix aix-definitions-schema.xsd">
  <generator>
    <oval:product_name>McAfee's OvalZilla</oval:product_name>
    <oval:product_version>Version 1.0</oval:product_version>
    <oval:schema_version>5.3</oval:schema_version>
    <oval:timestamp>2026-03-01T05:50:35-06:00</oval:timestamp>
  </generator>
  <definitions>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284039" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284038" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284037" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284036" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284035" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284034" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284033" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284032" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284031" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284030" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284029" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284028" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284027" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284026" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284025" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284024" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284023" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284022" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284021" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284020" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284019" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284018" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284017" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284016" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4017 at MITRE

Description

   PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST
   request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to
   exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4017" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284015" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284014" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284013" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284012" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284011" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284010" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284009" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284008" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284007" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284006" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284005" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284004" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284003" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284002" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284001" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:284000" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283999" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283998" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283997" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283996" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283995" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283994" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283993" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283992" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283991" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283990" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283989" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283988" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283987" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283986" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283985" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283984" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283983" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283982" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283981" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283980" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283979" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283978" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283977" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283976" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283975" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283974" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283973" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283972" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283971" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283970" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283969" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283968" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283967" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-3546 at MITRE

Description

   The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD Graphics Library 2.x, does not properly verify a
   certain colorsTotal structure member, which might allow remote attackers to conduct buffer overflow or buffer over-read attacks via a crafted
   GD file, a different vulnerability than CVE-2009-3293. NOTE: some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-3546" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283966" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283965" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283964" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283963" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283962" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283961" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283960" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283959" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283958" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283957" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283956" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283955" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283954" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283953" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283952" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283951" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283950" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283949" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283948" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283947" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283946" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283945" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283944" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283943" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283942" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283941" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283940" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283939" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283938" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283937" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283936" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283935" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283934" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283933" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283932" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283931" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283930" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283929" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283928" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283927" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283926" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283925" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283924" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283923" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283922" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283921" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283920" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283919" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283918" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2626 at MITRE

Description

   The zend_restore_ini_entry_cb function in zend_ini.c in PHP 5.3.0, 5.2.10, and earlier versions allows context-specific attackers to obtain
   sensitive information (memory contents) and cause a PHP crash by using the ini_set function to declare a variable, then using the ini_restore
   function to restore the variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2626" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2626" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283917" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283916" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283915" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283914" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283913" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283912" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283911" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283910" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283909" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283908" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283907" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283906" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283905" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283904" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283903" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283902" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283901" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283900" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283899" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283898" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283897" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283896" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283895" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283894" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283893" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283892" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283891" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283890" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283889" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283888" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283887" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283886" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283885" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283884" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283883" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283882" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283881" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283880" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283879" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283878" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283877" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283876" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283875" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283874" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283873" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283872" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283871" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283870" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283869" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5814 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in PHP, possibly 5.2.7 and earlier, when display_errors is enabled, allows remote attackers to
   inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to
   CVE-2006-0208.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5814" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5814" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283868" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283867" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283866" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283865" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283864" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283863" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283862" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283861" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283860" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283859" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283858" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283857" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283856" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283855" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283854" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283853" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283852" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283851" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283850" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283849" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283848" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283847" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283846" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283845" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283844" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283843" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283842" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283841" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283840" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283839" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283838" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283837" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283836" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283835" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283834" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283833" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283832" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283831" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283830" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283829" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283828" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283827" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283826" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283825" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283824" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283823" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283822" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283821" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283820" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5625 at MITRE

Description

   PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in
   httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a "php_value error_log" entry in a .htaccess
   file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5625" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5625" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283819" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283818" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283817" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283816" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283815" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283814" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283813" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283812" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283811" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283810" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283809" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283808" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283807" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283806" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283805" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283804" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283803" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283802" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283801" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283800" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283799" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283798" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283797" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283796" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283795" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283794" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283793" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283792" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283791" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283790" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283789" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283788" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283787" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283786" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283785" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283784" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283783" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283782" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283781" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283780" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283779" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283778" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283777" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283776" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283775" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283774" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283773" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283772" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283771" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5624 at MITRE

Description

   PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which
   allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as
   demonstrated by a setting of /etc for the error_log variable.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283770" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283769" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283768" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283767" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283766" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283765" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283764" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283763" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283762" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283761" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283760" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283759" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0007 at MITRE

Description

   net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the
   CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure
   arbitrary network-traffic filtering via a modified ebtables application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0007" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0007" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283758" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283757" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283756" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283755" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283754" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283753" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283752" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283751" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283750" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283749" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283748" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283747" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4538 at MITRE

Description

   drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet
   frame that exceeds the MTU, which allows remote attackers to have an unspecified impact via crafted packets, a related issue to
   CVE-2009-4537.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4538" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4538" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283746" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283745" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283744" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283743" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283742" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283741" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283740" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283739" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283738" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283737" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283736" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283735" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4536 at MITRE

Description

   drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by
   processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large
   packet with a crafted payload. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-1385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4536" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4536" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283734" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283733" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283732" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283731" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283730" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283729" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283728" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283727" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0162 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the
   application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and
   the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an
   embedded SVG document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0162" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0162" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283726" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283725" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283724" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283723" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283722" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283721" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283720" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283719" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0160 at MITRE

Description

   The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly
   handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and
   application crash) or possibly execute arbitrary code via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0160" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0160" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283718" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283717" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283716" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283715" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283714" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283713" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283712" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283711" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0159 at MITRE

Description

   The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283710" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283709" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283708" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283707" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283706" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283705" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283704" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283703" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3988 at MITRE

Description

   Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object
   properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks
   via crafted dialogArguments values.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3988" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3988" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283702" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283701" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283700" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283699" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283698" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283697" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283696" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283695" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-1571 at MITRE

Description

   Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and
   SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in
   low-memory situations.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1571" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1571" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283694" version="26">
      <metadata>
        <title>Test for netpbm On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4274 at MITRE

Description

   Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of
   service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a
   large color index value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4274" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279080" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283693" version="26">
      <metadata>
        <title>Test for libnetpbm On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4274 at MITRE

Description

   Stack-based buffer overflow in converter/ppm/xpmtoppm.c in netpbm before 10.47.07 allows context-dependent attackers to cause a denial of
   service (application crash) or possibly execute arbitrary code via an XPM image file that contains a crafted header field associated with a
   large color index value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4274" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4274" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279076" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283692" version="26">
      <metadata>
        <title>Test for libtool On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3736 at MITRE

Description

   ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries and possibly other products, attempts
   to open a .la file in the current working directory, which allows local users to gain privileges via a Trojan horse file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3736" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279072" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283691" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283690" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283689" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283688" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283687" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283686" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283685" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283684" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283683" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283682" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283681" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283680" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3556 at MITRE

Description

   A certain Red Hat configuration step for the qla2xxx driver in the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5, when N_Port ID
   Virtualization (NPIV) hardware is used, sets world-writable permissions for the (1) vport_create and (2) vport_delete files under
   /sys/class/scsi_host/, which allows local users to make arbitrary changes to SCSI host attributes by modifying these files.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 1.9 (AV:L/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3556" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3556" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283679" version="26">
      <metadata>
        <title>Test for cron On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0424 at MITRE

Description

   The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification
   times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.3 (AV:L/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0424" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0424" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279056" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283678" version="26">
      <metadata>
        <title>Test for squid On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0308 at MITRE

Description

   lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service
   (assertion failure) via a crafted DNS packet that only contains a header.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0308" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0308" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283677" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0304 at MITRE

Description

   Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a
   denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request
   function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0304" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283676" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0304 at MITRE

Description

   Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a
   denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request
   function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0304" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0304" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283675" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283674" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283673" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283672" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283671" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4484 at MITRE

Description

   Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in
   mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to
   execute arbitrary code or cause a denial of service (memory corruption and daemon crash) by establishing an SSL connection and sending an
   X.509 client certificate with a crafted name field, as demonstrated by mysql_overflow1.py and the vd_mysql5 module in VulnDisco Pack
   Professional 8.11. NOTE: this was originally reported for MySQL 5.0.51a.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4484" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4484" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283670" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4377 at MITRE

Description

   The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a
   crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283669" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4377 at MITRE

Description

   The (1) SMB and (2) SMB2 dissectors in Wireshark 0.9.0 through 1.2.4 allow remote attackers to cause a denial of service (crash) via a
   crafted packet that triggers a NULL pointer dereference, as demonstrated by fuzz-2009-12-07-11141.pcap.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283668" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4376 at MITRE

Description

   Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to
   cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283667" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-4376 at MITRE

Description

   Buffer overflow in the daintree_sna_read function in the Daintree SNA file parser in Wireshark 1.2.0 through 1.2.4 allows remote attackers to
   cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-4376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283666" version="26">
      <metadata>
        <title>Test for squid On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2855 at MITRE

Description

   The strListGetItem function in src/HttpHeaderTools.c in Squid 2.7 allows remote attackers to cause a denial of service via a crafted auth
   header with certain comma delimiters that trigger an infinite loop of calls to the strcspn function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2855" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2855" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279040" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283665" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2563 at MITRE

Description

   Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote
   attackers to cause a denial of service (crash) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2563" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283664" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-2563 at MITRE

Description

   Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote
   attackers to cause a denial of service (crash) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-2563" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2563" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283663" version="26">
      <metadata>
        <title>Test for ldapsmb On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283662" version="26">
      <metadata>
        <title>Test for samba-winbind On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283661" version="26">
      <metadata>
        <title>Test for samba-vscan On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283660" version="26">
      <metadata>
        <title>Test for samba-python On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283659" version="26">
      <metadata>
        <title>Test for samba-krb-printing On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283658" version="26">
      <metadata>
        <title>Test for samba-client On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283657" version="26">
      <metadata>
        <title>Test for samba On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283656" version="26">
      <metadata>
        <title>Test for libsmbclient-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283655" version="26">
      <metadata>
        <title>Test for libsmbclient On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283654" version="26">
      <metadata>
        <title>Test for libmsrpc-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283653" version="26">
      <metadata>
        <title>Test for libmsrpc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283652" version="26">
      <metadata>
        <title>Test for cifs-mount On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0926 at MITRE

Description

   The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x before 3.5.0rc3, when a writable share exists, allows
   remote authenticated users to leverage a directory traversal vulnerability, and access arbitrary files, by using the symlink command in
   smbclient to create a symlink containing .. (dot dot) sequences, related to the combination of the unix extensions and wide links options.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0926" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0926" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283651" version="26">
      <metadata>
        <title>Test for ldapsmb On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283650" version="26">
      <metadata>
        <title>Test for samba-winbind On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283649" version="26">
      <metadata>
        <title>Test for samba-vscan On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283648" version="26">
      <metadata>
        <title>Test for samba-python On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283647" version="26">
      <metadata>
        <title>Test for samba-krb-printing On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283646" version="26">
      <metadata>
        <title>Test for samba-client On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283645" version="26">
      <metadata>
        <title>Test for samba On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283644" version="26">
      <metadata>
        <title>Test for libsmbclient-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283643" version="26">
      <metadata>
        <title>Test for libsmbclient On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283642" version="26">
      <metadata>
        <title>Test for libmsrpc-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283641" version="26">
      <metadata>
        <title>Test for libmsrpc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283640" version="26">
      <metadata>
        <title>Test for cifs-mount On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0547 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are
   composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283630" version="26">
      <metadata>
        <title>Test for kdebase3-session On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278983" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283629" version="26">
      <metadata>
        <title>Test for kdebase3-samba On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278979" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283628" version="26">
      <metadata>
        <title>Test for kdebase3-nsplugin On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278975" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283627" version="26">
      <metadata>
        <title>Test for kdebase3-ksysguardd On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278971" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283626" version="26">
      <metadata>
        <title>Test for kdebase3-kdm On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278967" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283625" version="26">
      <metadata>
        <title>Test for kdebase3-extra On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278963" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283624" version="26">
      <metadata>
        <title>Test for kdebase3-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278959" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283623" version="26">
      <metadata>
        <title>Test for kdebase3 On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278955" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283622" version="26">
      <metadata>
        <title>Test for fileshareset On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2010-0436 at MITRE

Description

   Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of
   arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to
   improper interaction with ksm.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0436" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0436" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278951" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283621" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283620" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283619" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283618" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283617" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283616" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283615" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283614" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283613" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283612" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283611" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283610" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1088 at MITRE

Description

   fs/namei.c in Linux kernel 2.6.18 through 2.6.34 does not always follow NFS automount "symlinks," which allows attackers to have an unknown
   impact, related to LOOKUP_FOLLOW.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.4 (AV:N/AC:H/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283609" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283608" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283607" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283606" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283605" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283604" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283603" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283602" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283601" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283600" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283599" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283598" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1086 at MITRE

Description

   The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers
   to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, related to an invalid Payload Pointer ULE.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283597" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283596" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283595" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283594" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283593" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283592" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283591" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283590" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283589" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283588" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283587" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283586" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-1083 at MITRE

Description

   The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not
   clear the transfer buffer before returning to userspace when a USB command fails, which might make it easier for physically proximate
   attackers to obtain sensitive information (kernel memory).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1083" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1083" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283585" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283584" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283583" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283582" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283581" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283580" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283579" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283578" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283577" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283576" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283575" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283574" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0410 at MITRE

Description

   drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and
   system crash) by sending the kernel many NETLINK_CONNECTOR messages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0410" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0410" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283573" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283572" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283571" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283570" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283569" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283568" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283567" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283566" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283565" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283564" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283563" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283562" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-4020 at MITRE

Description

   Stack-based buffer overflow in the hfs subsystem in the Linux kernel 2.6.32 allows remote attackers to have an unspecified impact via a
   crafted Hierarchical File System (HFS) filesystem, related to the hfs_readdir function in fs/hfs/dir.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4020" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4020" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283561" version="26">
      <metadata>
        <title>Test for tar On SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0624 at MITRE

Description

   Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio
   before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more
   data than was requested, related to archive filenames that contain a : (colon) character.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278887" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283560" version="26">
      <metadata>
        <title>Test for cpio On SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0624 at MITRE

Description

   Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c in the rmt client functionality in GNU tar before 1.23 and GNU cpio
   before 2.11 allows remote rmt servers to cause a denial of service (memory corruption) or possibly execute arbitrary code by sending more
   data than was requested, related to archive filenames that contain a : (colon) character.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0624" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278883" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283559" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283558" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283557" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283556" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283555" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4030 at MITRE

Description

   MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1)
   DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL data home directory, related to
   incorrect calculation of the mysql_unpacked_real_data_home value. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-4098 and CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4030" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4030" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283554" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283553" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283552" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283551" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283550" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4028 at MITRE

Description

   The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a
   value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a
   crafted certificate, as demonstrated by a certificate presented by a server linked against the yaSSL library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283549" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283548" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283547" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283546" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283545" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-4019 at MITRE

Description

   mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements
   with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which
   allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-4019" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4019" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283544" version="26">
      <metadata>
        <title>Test for libmikmod On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2009-3996 at MITRE

Description

   Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote
   attackers to execute arbitrary code via an Ultratracker file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-3996" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3996" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283543" version="26">
      <metadata>
        <title>Test for libmikmod On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2009-3995 at MITRE

Description

   Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow
   remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE:
   some of these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-3995" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3995" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283542" version="26">
      <metadata>
        <title>Test for evolution-data-server-devel On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-0547 at MITRE

Description

   Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text
   displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than
   CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278841" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283541" version="26">
      <metadata>
        <title>Test for evolution-data-server On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-0547 at MITRE

Description

   Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text
   displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than
   CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278837" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283540" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283539" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283538" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283537" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283536" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-7247 at MITRE

Description

   sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a
   symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a
   (1) DATA DIRECTORY or (2) INDEX DIRECTORY argument referring to a subdirectory that requires following this symlink.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-7247" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7247" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283535" version="26">
      <metadata>
        <title>Test for ncpfs-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0791 at MITRE

Description

   The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to
   cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after
   the program exits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0791" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278809" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283534" version="26">
      <metadata>
        <title>Test for ncpfs On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0791 at MITRE

Description

   The (1) ncpmount, (2) ncpumount, and (3) ncplogin programs in ncpfs 2.2.6 do not properly create lock files, which allows local users to
   cause a denial of service (application failure) via unspecified vectors that trigger the creation of a /etc/mtab~ file that persists after
   the program exits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0791" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0791" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278805" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283533" version="26">
      <metadata>
        <title>Test for ncpfs-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0790 at MITRE

Description

   sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts,
   which allows local users to determine the existence of arbitrary files via the mountpoint name.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0790" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278809" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283532" version="26">
      <metadata>
        <title>Test for ncpfs On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0790 at MITRE

Description

   sutil/ncpumount.c in ncpumount in ncpfs 2.2.6 produces certain detailed error messages about the results of privileged file-access attempts,
   which allows local users to determine the existence of arbitrary files via the mountpoint name.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0790" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278805" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283531" version="26">
      <metadata>
        <title>Test for ncpfs-devel On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0788 at MITRE

Description

   ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks
   involving the (1) ncpmount and (2) ncpumount programs.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0788" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278809" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283530" version="26">
      <metadata>
        <title>Test for ncpfs On SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0788 at MITRE

Description

   ncpfs 2.2.6 allows local users to cause a denial of service, obtain sensitive information, or possibly gain privileges via symlink attacks
   involving the (1) ncpmount and (2) ncpumount programs.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0788" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0788" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278805" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283529" version="26">
      <metadata>
        <title>Test for libpng-devel On SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0205 at MITRE

Description

   The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly
   handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to
   cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate
   compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278801" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283528" version="26">
      <metadata>
        <title>Test for libpng On SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-0205 at MITRE

Description

   The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly
   handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to
   cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate
   compression method on data composed of many occurrences of the same character, related to a "decompression bomb" attack.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-0205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278797" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283527" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283526" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283525" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283524" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283523" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283522" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283521" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283520" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0182 at MITRE

Description

   The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4
   does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended
   access restrictions via crafted content.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283519" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283518" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283517" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283516" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283515" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283514" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283513" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283512" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0181 at MITRE

Description

   Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG
   element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive
   application launches) via an HTML document with many images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0181" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0181" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283511" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283510" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283509" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283508" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283507" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283506" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283505" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283504" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0179 at MITRE

Description

   Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is
   used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers
   to execute arbitrary JavaScript via a crafted HTTP response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283503" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283502" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283501" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283500" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283499" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283498" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283497" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283496" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0178 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from
   interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by
   loading a chrome: URL and then loading a javascript: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0178" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0178" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283495" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283494" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283493" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283492" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283491" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283490" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283489" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283488" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0177 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the
   window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code
   or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0177" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0177" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283487" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283486" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283485" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283484" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283483" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283482" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283481" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283480" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0176 at MITRE

Description

   Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not
   properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via
   unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0176" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283479" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283478" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283477" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283476" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283475" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283474" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283473" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283472" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0175 at MITRE

Description

   Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird
   before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash)
   via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0175" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283471" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283470" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283469" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283468" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283467" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283466" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283465" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283464" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0174 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2;
   Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application
   crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0174" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283463" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283462" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283461" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283460" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283459" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283458" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283457" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283456" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2010-0173 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4,
   and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute
   arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0173" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283455" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283454" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283453" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283452" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283451" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283450" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-translations On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283449" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190-gnomevfs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283448" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner190 On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-3376 at MITRE

Description

   Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or
   U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as
   demonstrated by displaying a non-executable extension for an executable file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-3376" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3376" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283447" version="26">
      <metadata>
        <title>Test for openssl-doc On SUSE Linux Enterprise Server 10 SP3 for IPF</title>
        <description>
   [293]CVE-2009-3245 at MITRE

Description

   OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2)
   crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2009-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3245" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283446" version="26">
      <metadata>
        <title>Test for openssl-devel On SUSE Linux Enterprise Server 10 SP3 for IPF</title>
        <description>
   [293]CVE-2009-3245 at MITRE

Description

   OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2)
   crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2009-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3245" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283445" version="26">
      <metadata>
        <title>Test for openssl On SUSE Linux Enterprise Server 10 SP3 for IPF</title>
        <description>
   [293]CVE-2009-3245 at MITRE

Description

   OpenSSL before 0.9.8m does not check for a NULL return value from bn_wexpand function calls in (1) crypto/bn/bn_div.c, (2)
   crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and (4) engines/e_ubsec.c, which has unspecified impact and context-dependent attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2009-3245" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3245" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283444" version="26">
      <metadata>
        <title>Test for samba-winbind On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283443" version="26">
      <metadata>
        <title>Test for samba-vscan On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283442" version="26">
      <metadata>
        <title>Test for samba-python On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283441" version="26">
      <metadata>
        <title>Test for samba-krb-printing On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283440" version="26">
      <metadata>
        <title>Test for samba-client On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283439" version="26">
      <metadata>
        <title>Test for samba On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283438" version="26">
      <metadata>
        <title>Test for libsmbclient-devel On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283437" version="26">
      <metadata>
        <title>Test for libsmbclient On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283436" version="26">
      <metadata>
        <title>Test for libmsrpc-devel On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283435" version="26">
      <metadata>
        <title>Test for libmsrpc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283434" version="26">
      <metadata>
        <title>Test for ldapsmb On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283433" version="26">
      <metadata>
        <title>Test for cifs-mount On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-2063 at MITRE

Description

   Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13
   allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted
   field in a packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-2063" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283432" version="26">
      <metadata>
        <title>Test for samba-winbind On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283431" version="26">
      <metadata>
        <title>Test for samba-vscan On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283430" version="26">
      <metadata>
        <title>Test for samba-python On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283429" version="26">
      <metadata>
        <title>Test for samba-krb-printing On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283428" version="26">
      <metadata>
        <title>Test for samba-client On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283427" version="26">
      <metadata>
        <title>Test for samba On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283426" version="26">
      <metadata>
        <title>Test for libsmbclient-devel On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283425" version="26">
      <metadata>
        <title>Test for libsmbclient On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283424" version="26">
      <metadata>
        <title>Test for libmsrpc-devel On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283423" version="26">
      <metadata>
        <title>Test for libmsrpc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283422" version="26">
      <metadata>
        <title>Test for ldapsmb On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278600" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283421" version="26">
      <metadata>
        <title>Test for cifs-mount On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0787 at MITRE

Description

   client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share
   on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0787" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283420" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283419" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283418" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283417" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283416" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283415" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0849 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in
   a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0849" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0849" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283414" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283413" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283412" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283411" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283410" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283409" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0848 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0848" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0848" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283408" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283407" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283406" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283405" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283404" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283403" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0847 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows arbitrary code execution via a crafted image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283402" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283401" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283400" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283399" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283398" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283397" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0846 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow
   that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image
   encoder (JPEGImageEncoderImpl).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283396" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283395" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283394" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283393" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283392" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283391" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0844 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a
   crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to
   arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283390" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283389" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283388" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283387" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283386" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283385" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0843 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper
   handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute
   arbitrary code.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0843" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0843" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283384" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283383" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283382" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283381" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283380" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283379" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0842 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that
   allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0842" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0842" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283378" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283377" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283376" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283375" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283374" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283373" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0841 at MITRE

Description

   Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows
   remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from
   the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime
   Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values,
   related to JPEGImageReader and "stepX".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0841" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0841" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283372" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283371" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283370" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283369" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283368" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283367" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0840 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information
   was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks
   when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an
   untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka
   "Trusted Methods Chaining Remote Code Execution Vulnerability."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0840" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0840" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283366" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283365" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283364" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283363" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283362" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283361" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0839 at MITRE

Description

   Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0839" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0839" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283360" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283359" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283358" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283357" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283356" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283355" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0838 at MITRE

Description

   Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the
   March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted
   size value in the readMabCurveData function in the CMM module in the JVM.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0838" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0838" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283354" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283353" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283352" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283351" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283350" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283349" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0837 at MITRE

Description

   Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote
   attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0837" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0837" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283348" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283347" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283346" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283345" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283344" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283343" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0095 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0095" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0095" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283342" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283341" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283340" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283339" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283338" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283337" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0094 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was
   obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks
   during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of
   a constructor that is being deserialized.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0094" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0094" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283336" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283335" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283334" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283333" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283332" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283331" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0092 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23
   allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0092" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0092" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283330" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283329" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283328" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283327" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283326" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283325" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0091 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0091" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0091" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283324" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283323" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283322" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283321" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283320" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283319" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0089 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0089" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0089" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283318" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283317" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283316" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283315" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283314" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283313" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0088 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0088" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0088" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283312" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283311" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283310" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283309" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283308" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283307" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0087 at MITRE

Description

   Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283306" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283305" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283304" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283303" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283302" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283301" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0085 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23,
   1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0085" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0085" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283300" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283299" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP3 for IBM POWER</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283298" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283297" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283296" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283295" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-0084 at MITRE

Description

   Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and
   1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-0084" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0084" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283294" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283293" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283292" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283291" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283290" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1203 at MITRE

Description

   The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via vectors that trigger an assertion failure in jstracer.cpp.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1203" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283289" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283288" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283287" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283286" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283285" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1202 at MITRE

Description

   Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird
   before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or
   possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1202" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283284" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283283" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283282" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283281" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283280" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1201 at MITRE

Description

   Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.10, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5
   allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
   vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1201" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283279" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283278" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283277" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283276" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283275" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1200 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly
   execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1200" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283274" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283273" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283272" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283271" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283270" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1199 at MITRE

Description

   Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before
   3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1199" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283269" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283268" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283267" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283266" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283265" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1198 at MITRE

Description

   Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to execute arbitrary code via vectors involving multiple plugin instances.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1198" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283264" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283263" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283262" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283261" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283260" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1197 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both
   "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct
   cross-site scripting (XSS) attacks via an uploaded HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1197" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283259" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283258" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283257" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283256" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283255" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1196 at MITRE

Description

   Integer overflow in the nsGenericDOMDataNode::SetTextInternal function in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4,
   Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a DOM node with a long text value
   that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283254" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283253" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283252" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283251" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283250" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1125 at MITRE

Description

   The JavaScript implementation in Mozilla Firefox 3.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote
   attackers to send selected keystrokes to a form field in a hidden frame, instead of the intended form field in a visible frame, via certain
   calls to the focus method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1125" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283249" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283248" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283247" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283246" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283245" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1121 at MITRE

Description

   Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows
   remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with
   garbage collection, as demonstrated by Nils during a Pwn2Own competition at CanSecWest 2010.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1121" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283244" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283243" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283242" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283241" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283240" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0183 at MITRE

Description

   Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5
   allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0183" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0183" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283239" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283238" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283237" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283236" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283235" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2008-5913 at MITRE

Description

   The Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before
   2.0.5, uses a random number generator that is seeded only once per browser session, which makes it easier for remote attackers to track a
   user, or trick a user into acting upon a spoofed pop-up message, by calculating the seed value, related to a "temporary footprint" and an
   "in-session phishing attack."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:N/AC:H/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5913" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283234" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283233" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283232" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283231" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283230" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283229" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283228" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283227" version="26">
      <metadata>
        <title>Test for kernel-kdumppae On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278350" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283226" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283225" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283224" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP3 for IPF</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283223" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1087 at MITRE

Description

   The nfs_wait_on_request function in fs/nfs/pagelist.c in Linux kernel 2.6.x through 2.6.33-rc5 allows attackers to cause a denial of service
   (Oops) via unknown vectors related to truncating a file and an operation that is not interruptible.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1087" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1087" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283222" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <reference ref_id="CVE-2010-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="SUSE Advisory Releases" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283221" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <reference ref_id="CVE-2010-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="SUSE Advisory Releases" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283220" version="27">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <reference ref_id="CVE-2010-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="SUSE Advisory Releases" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283219" version="27">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <reference ref_id="CVE-2010-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="SUSE Advisory Releases" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283218" version="27">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2753 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and
   SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a large selection attribute in a XUL tree element, which
   triggers a use-after-free.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2753" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2753" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
        <reference ref_id="CVE-2010-2754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2754" source="SUSE Advisory Releases" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283217" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283216" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283215" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283214" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283213" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2752 at MITRE

Description

   Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code by placing many Cascading Style Sheets (CSS)
   values in an array, related to references to external font resources and an inconsistency between 16-bit and 32-bit integers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2752" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2752" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283212" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283211" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283210" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283209" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283208" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-2751 at MITRE

Description

   The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7,
   and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security status of a document via vectors involving multiple requests, a
   redirect, and the history.back and history.forward JavaScript functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-2751" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2751" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283207" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283206" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283205" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283204" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283203" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1214 at MITRE

Description

   Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to
   execute arbitrary code via plugin content with many parameter elements.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1214" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1214" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283202" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283201" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283200" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283199" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283198" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1213 at MITRE

Description

   The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x
   before 3.1.1, and SeaMonkey before 2.0.6 does not verify that content is valid JavaScript code, which allows remote attackers to bypass the
   Same Origin Policy and obtain sensitive information via a crafted HTML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1213" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1213" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283197" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283196" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283195" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283194" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283193" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1211 at MITRE

Description

   Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x
   before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote attackers to cause a denial of service (memory corruption and
   application crash) or possibly execute arbitrary code via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1211" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1211" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283192" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283191" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283190" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283189" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283188" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1209 at MITRE

Description

   Use-after-free vulnerability in the NodeIterator implementation in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey
   before 2.0.6, allows remote attackers to execute arbitrary code via a crafted NodeFilter that detaches DOM nodes, related to the NodeIterator
   interface and an a javascript callback.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1209" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1209" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283187" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283186" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283185" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283184" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283183" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1208 at MITRE

Description

   Use-after-free vulnerability in the attribute-cloning functionality in the DOM implementation in Mozilla Firefox 3.5.x before 3.5.11 and
   3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via vectors related to deletion of an event
   attribute node with a nonzero reference count.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1208" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1208" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283182" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283181" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283180" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283179" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283178" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1206 at MITRE

Description

   The startDocumentLoad function in browser/base/content/browser.js in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and
   SeaMonkey before 2.0.6, does not properly implement the Same Origin Policy in certain circumstances related to the about:blank document and a
   document that is currently loading, which allows (1) remote web servers to conduct spoofing attacks via vectors involving a 204 (aka No
   Content) status code, and allows (2) remote attackers to conduct spoofing attacks via vectors involving a window.stop call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1206" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1206" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283177" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283176" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283175" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283174" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283173" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-1205 at MITRE

Description

   Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote
   attackers to execute arbitrary code via a PNG image that triggers an additional data row.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-1205" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283172" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283171" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191-gnomevfs On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283170" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner191 On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283169" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283168" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP3 for x86</title>
        <description>
   [293]CVE-2010-0654 at MITRE

Description

   Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6
   permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is
   malformed, which allows remote HTTP servers to obtain sensitive information via a crafted document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for x86</platform>
        </affected>
        <reference ref_id="CVE-2010-0654" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0654" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283167" version="26">
      <metadata>
        <title>Test for gpg2 On SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2010-2547 at MITRE

Description

   Use-after-free vulnerability in kbx/keybox-blob.c in GPGSM in GnuPG 2.x through 2.0.16 allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a certificate with a large number of Subject Alternate Names, which is not properly handled
   in a realloc operation when importing the certificate or verifying its signature.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP3 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2010-2547" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2547" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278234" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283166" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5355 at MITRE

Description

   The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to
   execute arbitrary code via DNS man-in-the-middle attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5355" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283165" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5355 at MITRE

Description

   The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to
   execute arbitrary code via DNS man-in-the-middle attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5355" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283164" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5355 at MITRE

Description

   The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to
   execute arbitrary code via DNS man-in-the-middle attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5355" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283163" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5355 at MITRE

Description

   The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to
   execute arbitrary code via DNS man-in-the-middle attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5355" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283162" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5355 at MITRE

Description

   The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to
   execute arbitrary code via DNS man-in-the-middle attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5355" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5355" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283161" version="26">
      <metadata>
        <title>Test for python-xml On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278116" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283160" version="26">
      <metadata>
        <title>Test for python-tk On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278112" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283159" version="26">
      <metadata>
        <title>Test for python-idle On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278108" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283158" version="26">
      <metadata>
        <title>Test for python-gdbm On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278104" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283157" version="26">
      <metadata>
        <title>Test for python-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278100" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283156" version="26">
      <metadata>
        <title>Test for python-demo On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278096" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283155" version="26">
      <metadata>
        <title>Test for python-curses On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278092" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283154" version="26">
      <metadata>
        <title>Test for python On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5031 at MITRE

Description

   Multiple integer overflows in Python 2.2.3 through 2.5.1, and 2.6, allow context-dependent attackers to have an unknown impact via a large
   integer value in the tabsize argument to the expandtabs method, as implemented by (1) the string_expandtabs function in
   Objects/stringobject.c and (2) the unicode_expandtabs function in Objects/unicodeobject.c. NOTE: this vulnerability reportedly exists because
   of an incomplete fix for CVE-2008-2315.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5031" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5031" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278088" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283153" version="26">
      <metadata>
        <title>Test for python-xml On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278116" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283152" version="26">
      <metadata>
        <title>Test for python-tk On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278112" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283151" version="26">
      <metadata>
        <title>Test for python-idle On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278108" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283150" version="26">
      <metadata>
        <title>Test for python-gdbm On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278104" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283149" version="26">
      <metadata>
        <title>Test for python-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278100" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283148" version="26">
      <metadata>
        <title>Test for python-demo On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278096" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283147" version="26">
      <metadata>
        <title>Test for python-curses On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278092" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283146" version="26">
      <metadata>
        <title>Test for python On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4864 at MITRE

Description

   Multiple integer overflows in imageop.c in the imageop module in Python 1.5.2 through 2.5.1 allow context-dependent attackers to break out of
   the Python VM and execute arbitrary code via large integer values in certain arguments to the crop function, leading to a buffer overflow, a
   different vulnerability than CVE-2007-4965 and CVE-2008-1679.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4864" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4864" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278088" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283145" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4685 at MITRE

Description

   Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3
   allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4685" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283144" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4685 at MITRE

Description

   Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3
   allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4685" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4685" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283143" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4683 at MITRE

Description

   The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to
   cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4683" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4683" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283142" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4683 at MITRE

Description

   The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to
   cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4683" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4683" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283141" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4681 at MITRE

Description

   Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of
   service (application crash or abort) via unknown packets.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4681" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4681" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283140" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4681 at MITRE

Description

   Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of
   service (application crash or abort) via unknown packets.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4681" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4681" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283139" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4680 at MITRE

Description

   packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash
   or abort) via a malformed USB Request Block (URB).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4680" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4680" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283138" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4680 at MITRE

Description

   packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash
   or abort) via a malformed USB Request Block (URB).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4680" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4680" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283137" version="26">
      <metadata>
        <title>Test for nfs-utils On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4552 at MITRE

Description

   nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function with the wrong order of arguments, which causes TCP
   Wrappers to ignore netgroups and allows remote attackers to bypass intended access restrictions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4552" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4552" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283134" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283133" version="26">
      <metadata>
        <title>Test for samba-winbind On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278640" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283132" version="26">
      <metadata>
        <title>Test for samba-vscan On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278636" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283131" version="26">
      <metadata>
        <title>Test for samba-python On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278632" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283130" version="26">
      <metadata>
        <title>Test for samba-krb-printing On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278628" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283129" version="26">
      <metadata>
        <title>Test for samba-client On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278624" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283128" version="26">
      <metadata>
        <title>Test for samba On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278620" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283127" version="26">
      <metadata>
        <title>Test for libsmbclient-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278616" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283126" version="26">
      <metadata>
        <title>Test for libsmbclient On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278612" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283125" version="26">
      <metadata>
        <title>Test for libmsrpc-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278608" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283124" version="26">
      <metadata>
        <title>Test for libmsrpc On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278604" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283123" version="26">
      <metadata>
        <title>Test for cifs-mount On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4314 at MITRE

Description

   smbd in Samba 3.0.29 through 3.2.4 might allow remote attackers to read arbitrary memory and cause a denial of service via crafted (1) trans,
   (2) trans2, and (3) nttrans requests, related to a "cut&amp;paste error" that causes an improper bounds check to be performed.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 8.5 (AV:N/AC:L/Au:N/C:C/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4314" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4314" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278596" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283122" version="26">
      <metadata>
        <title>Test for libxml2-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
[293]CVE-2008-4225 at MITRE Description Integer overflow in the
                    xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a
                    denial of service (infinite loop) via a large XML document.
                    ________________________________________________________________________________________________________________________________________
                    [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C) Novell/SUSE
                    information
</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-4225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283121" version="25">
      <metadata>
        <title>Test for libxml2 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-4225 at MITRE

Description

   Integer overflow in the xmlBufferResize function in libxml2 2.7.2 allows context-dependent attackers to cause a denial of service (infinite
   loop) via a large XML document.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-4225" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4225" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283120" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4098 at MITRE

Description

   MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this
   vulnerability exists because of an incomplete fix for CVE-2008-4097.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283119" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4098 at MITRE

Description

   MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this
   vulnerability exists because of an incomplete fix for CVE-2008-4097.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283118" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4098 at MITRE

Description

   MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this
   vulnerability exists because of an incomplete fix for CVE-2008-4097.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283117" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4098 at MITRE

Description

   MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this
   vulnerability exists because of an incomplete fix for CVE-2008-4097.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283116" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4098 at MITRE

Description

   MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables
   created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this
   vulnerability exists because of an incomplete fix for CVE-2008-4097.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283115" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4097 at MITRE

Description

   MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data
   directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4097" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283114" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4097 at MITRE

Description

   MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data
   directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4097" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283113" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4097 at MITRE

Description

   MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data
   directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4097" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283112" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4097 at MITRE

Description

   MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data
   directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4097" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283111" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-4097 at MITRE

Description

   MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA
   DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data
   directory, which are followed when tables are created in the future. NOTE: this vulnerability exists because of an incomplete fix for
   CVE-2008-2079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:N/AC:H/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-4097" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4097" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283110" version="26">
      <metadata>
        <title>Test for mysql-shared On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-3963 at MITRE

Description

   MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b (b single-quote single-quote) token, aka an
   empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-3963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3963" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278833" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283109" version="26">
      <metadata>
        <title>Test for mysql-devel On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-3963 at MITRE

Description

   MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b (b single-quote single-quote) token, aka an
   empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-3963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3963" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283108" version="26">
      <metadata>
        <title>Test for mysql-client On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-3963 at MITRE

Description

   MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b (b single-quote single-quote) token, aka an
   empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-3963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3963" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278825" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283107" version="26">
      <metadata>
        <title>Test for mysql-Max On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-3963 at MITRE

Description

   MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b (b single-quote single-quote) token, aka an
   empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-3963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3963" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278821" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283106" version="26">
      <metadata>
        <title>Test for mysql On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-3963 at MITRE

Description

   MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b (b single-quote single-quote) token, aka an
   empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-3963" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3963" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278817" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283105" version="26">
      <metadata>
        <title>Test for ethereal-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3933 at MITRE

Description

   Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted
   zlib-compressed data that triggers an invalid read in the tvb_uncompress function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.3 (AV:A/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283104" version="26">
      <metadata>
        <title>Test for ethereal On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3933 at MITRE

Description

   Wireshark (formerly Ethereal) 0.10.14 through 1.0.2 allows attackers to cause a denial of service (crash) via a packet with crafted
   zlib-compressed data that triggers an invalid read in the tvb_uncompress function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.3 (AV:A/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283103" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5513 at MITRE

Description

   Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers
   to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks
   via unknown vectors related to restoration of SessionStore data.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5513" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283102" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5513 at MITRE

Description

   Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers
   to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks
   via unknown vectors related to restoration of SessionStore data.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5513" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5513" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283101" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5512 at MITRE

Description

   Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and
   SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which "page
   content can pollute XPCNativeWrappers."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5512" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283078" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283100" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5512 at MITRE

Description

   Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and
   SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which "page
   content can pollute XPCNativeWrappers."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5512" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283099" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5512 at MITRE

Description

   Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and
   SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with chrome privileges via unknown vectors in which "page
   content can pollute XPCNativeWrappers."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5512" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5512" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283098" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5511 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5511" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283078" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283097" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5511 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5511" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283096" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5511 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an "unloaded document."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5511" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5511" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283095" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5508 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly
   parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing
   attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5508" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283078" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283094" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5508 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly
   parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing
   attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5508" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283093" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5508 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly
   parse URLs with leading whitespace or control characters, which might allow remote attackers to misrepresent URLs and simplify phishing
   attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5508" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5508" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283092" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5507 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target
   resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM
   API.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5507" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283078" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283091" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5507 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target
   resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM
   API.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5507" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283090" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5507 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target
   resource, which generates an error if the target data does not have JavaScript syntax, which can be accessed using the window.onerror DOM
   API.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.0 (AV:N/AC:M/Au:S/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5507" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5507" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283089" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5506 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a
   302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5506" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283078" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283088" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5506 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a
   302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5506" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283087" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5506 at MITRE

Description

   Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote
   attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a
   302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5506" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5506" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283086" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5504 at MITRE

Description

   Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the
   feed preview, a different vulnerability than CVE-2008-3836.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5504" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283085" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5504 at MITRE

Description

   Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the
   feed preview, a different vulnerability than CVE-2008-3836.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5504" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5504" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283084" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5503 at MITRE

Description

   The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14
   does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other
   domains via crafted XBL bindings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5503" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283078" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283083" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5503 at MITRE

Description

   The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14
   does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other
   domains via crafted XBL bindings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5503" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283082" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5503 at MITRE

Description

   The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14
   does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other
   domains via crafted XBL bindings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.6 (AV:N/AC:H/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5503" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5503" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283081" version="26">
      <metadata>
        <title>Test for mozilla-xulrunner On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5500 at MITRE

Description

   The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before
   1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a
   reachable assertion or (2) an integer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5500" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283078" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283077" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5500 at MITRE

Description

   The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before
   1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a
   reachable assertion or (2) an integer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5500" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283076" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5500 at MITRE

Description

   The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before
   1.1.14 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to (1) a
   reachable assertion or (2) an integer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5500" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5500" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283075" version="26">
      <metadata>
        <title>Test for cups-libs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
[293]CVE-2008-5286 at MITRE Description Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.
   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) Novell/SUSE information.
</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-5286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283074" version="26">
      <metadata>
        <title>Test for cups-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
[293]CVE-2008-5286 at MITRE Description Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.
      [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) Novell/SUSE information 
</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-5286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283073" version="26">
      <metadata>
        <title>Test for cups-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
[293]CVE-2008-5286 at MITRE Description Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.
  [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) Novell/SUSE information
</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-5286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283072" version="27">
      <metadata>
        <title>Test for cups On Suse Linux Enterprise server(x86 platform)</title>
        <description>
[293]CVE-2008-5286 at MITRE Description Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.
  [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) Novell/SUSE information 
</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-5286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283071" version="25">
      <metadata>
        <title>Test for cups-libs On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-3641 at MITRE

Description

   The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen
   width and pen color opcodes that overwrite arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-3641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3641" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283070" version="25">
      <metadata>
        <title>Test for cups-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-3641 at MITRE

Description

   The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen
   width and pen color opcodes that overwrite arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-3641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3641" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283069" version="25">
      <metadata>
        <title>Test for cups-client On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-3641 at MITRE

Description

   The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen
   width and pen color opcodes that overwrite arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-3641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3641" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283068" version="25">
      <metadata>
        <title>Test for cups On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-3641 at MITRE

Description

   The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen
   width and pen color opcodes that overwrite arbitrary memory.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-3641" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3641" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283067" version="26">
      <metadata>
        <title>Test for bind-utils On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2009-0025 at MITRE

Description

   BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows
   remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281395" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283066" version="26">
      <metadata>
        <title>Test for bind-libs On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2009-0025 at MITRE

Description

   BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows
   remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281391" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283065" version="26">
      <metadata>
        <title>Test for bind-doc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2009-0025 at MITRE

Description

   BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows
   remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281387" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283064" version="26">
      <metadata>
        <title>Test for bind-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2009-0025 at MITRE

Description

   BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows
   remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281383" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283063" version="26">
      <metadata>
        <title>Test for bind-chrootenv On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2009-0025 at MITRE

Description

   BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows
   remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281379" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283062" version="26">
      <metadata>
        <title>Test for bind On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2009-0025 at MITRE

Description

   BIND 9.6.0, 9.5.1, 9.5.0, 9.4.3, and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows
   remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281375" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283061" version="26">
      <metadata>
        <title>Test for compat-openssl097g On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2008-5077 at MITRE

Description

   OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to
   bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2008-5077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278461" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283060" version="26">
      <metadata>
        <title>Test for openssl-doc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5077 at MITRE

Description

   OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to
   bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283059" version="26">
      <metadata>
        <title>Test for openssl-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5077 at MITRE

Description

   OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to
   bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283058" version="26">
      <metadata>
        <title>Test for openssl On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5077 at MITRE

Description

   OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to
   bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5077" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5077" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283057" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283056" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283055" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283054" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283053" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283052" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283051" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283050" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283049" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283048" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283047" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5182 at MITRE

Description

   The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to
   race conditions in inotify watch removal and umount.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.9 (AV:L/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5182" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5182" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283046" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283045" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283044" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283043" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283042" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283041" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283040" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283039" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283038" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283037" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283036" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5029 at MITRE

Description

   The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself
   through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an
   SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5029" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5029" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283035" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283034" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283033" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283032" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283031" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283030" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283029" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283028" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283027" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283026" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283025" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5025 at MITRE

Description

   Stack-based buffer overflow in the hfs_cat_find_brec function in fs/hfs/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to
   cause a denial of service (memory corruption or system crash) via an hfs filesystem image with an invalid catalog namelength field, a related
   issue to CVE-2008-4933.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5025" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5025" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for nfs-utils" id="oval:com.mcafee.oval.gen:tst:283134" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:283135" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:283136" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner" id="oval:com.mcafee.oval.gen:tst:283078" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:283079" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:283080" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-utils" id="oval:com.mcafee.oval.gen:tst:281395" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281396" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281397" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-libs" id="oval:com.mcafee.oval.gen:tst:281391" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281392" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281393" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-doc" id="oval:com.mcafee.oval.gen:tst:281387" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281388" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281389" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-devel" id="oval:com.mcafee.oval.gen:tst:281383" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281384" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281385" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind-chrootenv" id="oval:com.mcafee.oval.gen:tst:281379" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281380" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281381" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for bind" id="oval:com.mcafee.oval.gen:tst:281375" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281376" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281377" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2-devel" id="oval:com.mcafee.oval.gen:tst:281188" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281189" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281190" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libxml2" id="oval:com.mcafee.oval.gen:tst:281184" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281185" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281186" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-plugin" id="oval:com.mcafee.oval.gen:tst:280741" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280742" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280743" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-jdbc" id="oval:com.mcafee.oval.gen:tst:280737" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280738" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280739" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-devel" id="oval:com.mcafee.oval.gen:tst:280733" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280734" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280735" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-alsa" id="oval:com.mcafee.oval.gen:tst:280729" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280730" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280731" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun" id="oval:com.mcafee.oval.gen:tst:280725" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280726" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280727" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups-libs" id="oval:com.mcafee.oval.gen:tst:280144" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280145" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280146" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups-devel" id="oval:com.mcafee.oval.gen:tst:280140" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280141" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280142" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups-client" id="oval:com.mcafee.oval.gen:tst:280136" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280137" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280138" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups" id="oval:com.mcafee.oval.gen:tst:280132" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280133" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280134" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-zlib" id="oval:com.mcafee.oval.gen:tst:279364" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279365" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279366" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-xsl" id="oval:com.mcafee.oval.gen:tst:279360" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279361" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279362" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-xmlrpc" id="oval:com.mcafee.oval.gen:tst:279356" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279357" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279358" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-xmlreader" id="oval:com.mcafee.oval.gen:tst:279352" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279353" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279354" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-wddx" id="oval:com.mcafee.oval.gen:tst:279348" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279349" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279350" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-tokenizer" id="oval:com.mcafee.oval.gen:tst:279344" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279345" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279346" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sysvshm" id="oval:com.mcafee.oval.gen:tst:279340" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279341" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279342" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sysvsem" id="oval:com.mcafee.oval.gen:tst:279336" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279337" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279338" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sysvmsg" id="oval:com.mcafee.oval.gen:tst:279332" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279333" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279334" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-suhosin" id="oval:com.mcafee.oval.gen:tst:279328" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279329" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279330" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sqlite" id="oval:com.mcafee.oval.gen:tst:279324" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279325" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279326" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sockets" id="oval:com.mcafee.oval.gen:tst:279320" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279321" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279322" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-soap" id="oval:com.mcafee.oval.gen:tst:279316" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279317" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279318" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-snmp" id="oval:com.mcafee.oval.gen:tst:279312" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279313" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279314" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-shmop" id="oval:com.mcafee.oval.gen:tst:279308" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279309" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279310" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pspell" id="oval:com.mcafee.oval.gen:tst:279304" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279305" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279306" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-posix" id="oval:com.mcafee.oval.gen:tst:279300" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279301" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279302" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pgsql" id="oval:com.mcafee.oval.gen:tst:279296" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279297" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279298" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pear" id="oval:com.mcafee.oval.gen:tst:279292" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279293" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279294" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pdo" id="oval:com.mcafee.oval.gen:tst:279288" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279289" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279290" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pcntl" id="oval:com.mcafee.oval.gen:tst:279284" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279285" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279286" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-openssl" id="oval:com.mcafee.oval.gen:tst:279280" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279281" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279282" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-odbc" id="oval:com.mcafee.oval.gen:tst:279276" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279277" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279278" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ncurses" id="oval:com.mcafee.oval.gen:tst:279272" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279273" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279274" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mysql" id="oval:com.mcafee.oval.gen:tst:279268" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279269" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279270" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mhash" id="oval:com.mcafee.oval.gen:tst:279264" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279265" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279266" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mcrypt" id="oval:com.mcafee.oval.gen:tst:279260" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279261" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279262" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mbstring" id="oval:com.mcafee.oval.gen:tst:279256" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279257" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279258" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ldap" id="oval:com.mcafee.oval.gen:tst:279252" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279253" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279254" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-json" id="oval:com.mcafee.oval.gen:tst:279248" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279249" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279250" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-imap" id="oval:com.mcafee.oval.gen:tst:279244" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279245" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279246" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-iconv" id="oval:com.mcafee.oval.gen:tst:279240" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279241" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279242" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-gmp" id="oval:com.mcafee.oval.gen:tst:279236" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279237" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279238" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-gettext" id="oval:com.mcafee.oval.gen:tst:279232" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279233" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279234" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-gd" id="oval:com.mcafee.oval.gen:tst:279228" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279229" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279230" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ftp" id="oval:com.mcafee.oval.gen:tst:279224" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279225" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279226" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-fastcgi" id="oval:com.mcafee.oval.gen:tst:279220" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279221" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279222" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-exif" id="oval:com.mcafee.oval.gen:tst:279216" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279217" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279218" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dom" id="oval:com.mcafee.oval.gen:tst:279212" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279213" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279214" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-devel" id="oval:com.mcafee.oval.gen:tst:279208" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279209" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279210" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dbase" id="oval:com.mcafee.oval.gen:tst:279204" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279205" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279206" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dba" id="oval:com.mcafee.oval.gen:tst:279200" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279201" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279202" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-curl" id="oval:com.mcafee.oval.gen:tst:279196" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279197" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279198" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ctype" id="oval:com.mcafee.oval.gen:tst:279192" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279193" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279194" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-calendar" id="oval:com.mcafee.oval.gen:tst:279188" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279189" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279190" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-bz2" id="oval:com.mcafee.oval.gen:tst:279184" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279185" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279186" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-bcmath" id="oval:com.mcafee.oval.gen:tst:279180" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279181" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279182" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5" id="oval:com.mcafee.oval.gen:tst:279176" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279177" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279178" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for apache2-mod_php5" id="oval:com.mcafee.oval.gen:tst:279172" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279173" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279174" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for netpbm" id="oval:com.mcafee.oval.gen:tst:279080" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279081" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279082" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libnetpbm" id="oval:com.mcafee.oval.gen:tst:279076" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279077" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279078" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libtool" id="oval:com.mcafee.oval.gen:tst:279072" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279073" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279074" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cron" id="oval:com.mcafee.oval.gen:tst:279056" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279057" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279058" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for squid" id="oval:com.mcafee.oval.gen:tst:279040" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279041" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279042" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ethereal-devel" id="oval:com.mcafee.oval.gen:tst:279036" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279037" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279038" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ethereal" id="oval:com.mcafee.oval.gen:tst:279032" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279033" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279034" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-session" id="oval:com.mcafee.oval.gen:tst:278983" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278984" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278985" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-samba" id="oval:com.mcafee.oval.gen:tst:278979" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278980" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278981" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-nsplugin" id="oval:com.mcafee.oval.gen:tst:278975" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278976" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278977" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-ksysguardd" id="oval:com.mcafee.oval.gen:tst:278971" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278972" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278973" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-kdm" id="oval:com.mcafee.oval.gen:tst:278967" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278968" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278969" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-extra" id="oval:com.mcafee.oval.gen:tst:278963" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278964" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278965" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3-devel" id="oval:com.mcafee.oval.gen:tst:278959" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278960" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278961" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kdebase3" id="oval:com.mcafee.oval.gen:tst:278955" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278956" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278957" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for fileshareset" id="oval:com.mcafee.oval.gen:tst:278951" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278952" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278953" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tar" id="oval:com.mcafee.oval.gen:tst:278887" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278888" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278889" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cpio" id="oval:com.mcafee.oval.gen:tst:278883" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278884" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278885" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmikmod" id="oval:com.mcafee.oval.gen:tst:278863" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278864" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278865" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for evolution-data-server-devel" id="oval:com.mcafee.oval.gen:tst:278841" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278842" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278843" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for evolution-data-server" id="oval:com.mcafee.oval.gen:tst:278837" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278838" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278839" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-shared" id="oval:com.mcafee.oval.gen:tst:278833" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278834" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278835" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-devel" id="oval:com.mcafee.oval.gen:tst:278829" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278830" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278831" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-client" id="oval:com.mcafee.oval.gen:tst:278825" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278826" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278827" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql-Max" id="oval:com.mcafee.oval.gen:tst:278821" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278822" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278823" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mysql" id="oval:com.mcafee.oval.gen:tst:278817" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278818" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278819" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ncpfs-devel" id="oval:com.mcafee.oval.gen:tst:278809" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278810" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278811" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ncpfs" id="oval:com.mcafee.oval.gen:tst:278805" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278806" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278807" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpng-devel" id="oval:com.mcafee.oval.gen:tst:278801" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278802" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278803" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpng" id="oval:com.mcafee.oval.gen:tst:278797" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278798" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278799" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-winbind" id="oval:com.mcafee.oval.gen:tst:278640" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278641" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278642" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-vscan" id="oval:com.mcafee.oval.gen:tst:278636" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278637" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278638" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-python" id="oval:com.mcafee.oval.gen:tst:278632" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278633" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278634" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-krb-printing" id="oval:com.mcafee.oval.gen:tst:278628" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278629" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278630" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba-client" id="oval:com.mcafee.oval.gen:tst:278624" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278625" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278626" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for samba" id="oval:com.mcafee.oval.gen:tst:278620" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278621" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278622" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsmbclient-devel" id="oval:com.mcafee.oval.gen:tst:278616" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278617" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278618" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsmbclient" id="oval:com.mcafee.oval.gen:tst:278612" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278613" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278614" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmsrpc-devel" id="oval:com.mcafee.oval.gen:tst:278608" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278609" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278610" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmsrpc" id="oval:com.mcafee.oval.gen:tst:278604" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278605" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278606" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ldapsmb" id="oval:com.mcafee.oval.gen:tst:278600" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278601" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278602" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cifs-mount" id="oval:com.mcafee.oval.gen:tst:278596" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278597" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278598" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for compat-openssl097g" id="oval:com.mcafee.oval.gen:tst:278461" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278462" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278463" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-doc" id="oval:com.mcafee.oval.gen:tst:278429" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278430" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278431" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-devel" id="oval:com.mcafee.oval.gen:tst:278425" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278426" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278427" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl" id="oval:com.mcafee.oval.gen:tst:278421" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278422" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278423" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-kdumppae" id="oval:com.mcafee.oval.gen:tst:278350" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278351" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278352" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-xenpae" id="oval:com.mcafee.oval.gen:tst:278342" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278343" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278344" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-xen" id="oval:com.mcafee.oval.gen:tst:278338" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278339" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278340" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-vmipae" id="oval:com.mcafee.oval.gen:tst:278334" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278335" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278336" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-vmi" id="oval:com.mcafee.oval.gen:tst:278330" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278331" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278332" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-syms" id="oval:com.mcafee.oval.gen:tst:278326" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278327" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278328" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-source" id="oval:com.mcafee.oval.gen:tst:278322" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278323" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278324" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-smp" id="oval:com.mcafee.oval.gen:tst:278318" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278319" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278320" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-kdump" id="oval:com.mcafee.oval.gen:tst:278314" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278315" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278316" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-default" id="oval:com.mcafee.oval.gen:tst:278310" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278311" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278312" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-debug" id="oval:com.mcafee.oval.gen:tst:278306" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278307" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278308" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-bigsmp" id="oval:com.mcafee.oval.gen:tst:278302" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278303" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278304" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner191-translations" id="oval:com.mcafee.oval.gen:tst:278248" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278249" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278250" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner191-gnomevfs" id="oval:com.mcafee.oval.gen:tst:278244" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278245" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278246" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner191" id="oval:com.mcafee.oval.gen:tst:278240" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278241" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278242" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gpg2" id="oval:com.mcafee.oval.gen:tst:278234" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278235" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278236" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190-translations" id="oval:com.mcafee.oval.gen:tst:278200" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278201" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278202" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190-gnomevfs" id="oval:com.mcafee.oval.gen:tst:278196" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278197" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278198" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mozilla-xulrunner190" id="oval:com.mcafee.oval.gen:tst:278192" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278193" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278194" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for MozillaFirefox-translations" id="oval:com.mcafee.oval.gen:tst:278168" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278169" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278170" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for MozillaFirefox" id="oval:com.mcafee.oval.gen:tst:278160" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278161" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278162" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-plugin" id="oval:com.mcafee.oval.gen:tst:278140" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278141" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278142" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-jdbc" id="oval:com.mcafee.oval.gen:tst:278136" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278137" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278138" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-fonts" id="oval:com.mcafee.oval.gen:tst:278132" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278133" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278134" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-devel" id="oval:com.mcafee.oval.gen:tst:278128" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278129" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278130" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-alsa" id="oval:com.mcafee.oval.gen:tst:278124" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278125" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278126" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm" id="oval:com.mcafee.oval.gen:tst:278120" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278121" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278122" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-xml" id="oval:com.mcafee.oval.gen:tst:278116" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278117" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278118" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-tk" id="oval:com.mcafee.oval.gen:tst:278112" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278113" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278114" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-idle" id="oval:com.mcafee.oval.gen:tst:278108" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278109" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278110" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-gdbm" id="oval:com.mcafee.oval.gen:tst:278104" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278105" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278106" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-devel" id="oval:com.mcafee.oval.gen:tst:278100" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278101" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278102" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-demo" id="oval:com.mcafee.oval.gen:tst:278096" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278097" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278098" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python-curses" id="oval:com.mcafee.oval.gen:tst:278092" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278093" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278094" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for python" id="oval:com.mcafee.oval.gen:tst:278088" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278089" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278090" />
    </rpminfo_test>
  </tests>
  <objects>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:283135" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>nfs-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:283079" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281396" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-utils</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281392" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281388" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281384" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281380" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind-chrootenv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281376" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>bind</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281189" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281185" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libxml2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280742" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280738" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280734" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280730" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280726" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280145" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280141" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280137" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280133" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279365" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-zlib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279361" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-xsl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279357" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-xmlrpc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279353" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-xmlreader</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279349" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-wddx</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279345" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-tokenizer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279341" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sysvshm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279337" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sysvsem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279333" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sysvmsg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279329" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-suhosin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279325" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sqlite</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279321" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sockets</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279317" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-soap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279313" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-snmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279309" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-shmop</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279305" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pspell</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279301" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-posix</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279297" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pgsql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279293" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pear</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279289" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pdo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279285" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pcntl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279281" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279277" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-odbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279273" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ncurses</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279269" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279265" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mhash</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279261" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mcrypt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279257" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mbstring</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279253" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ldap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279249" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-json</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279245" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-imap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279241" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-iconv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279237" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-gmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279233" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-gettext</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279229" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-gd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279225" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ftp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279221" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-fastcgi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279217" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-exif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279213" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dom</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279209" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279205" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dbase</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279201" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279197" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-curl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279193" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ctype</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279189" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-calendar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279185" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-bz2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279181" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-bcmath</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279177" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279173" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apache2-mod_php5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279081" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netpbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279077" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libnetpbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279073" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libtool</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279057" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cron</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279041" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>squid</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279037" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279033" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278984" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-session</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278980" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278976" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-nsplugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278972" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-ksysguardd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278968" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-kdm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278964" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-extra</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278960" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278956" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kdebase3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278952" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>fileshareset</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278888" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278884" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cpio</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278864" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmikmod</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278842" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278838" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278834" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-shared</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278830" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278826" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278822" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql-Max</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278818" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278810" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ncpfs-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278806" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ncpfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278802" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278798" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278641" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-winbind</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278637" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-vscan</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278633" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278629" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-krb-printing</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278625" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278621" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>samba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278617" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278613" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsmbclient</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278609" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmsrpc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278605" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmsrpc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278601" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ldapsmb</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278597" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cifs-mount</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278462" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>compat-openssl097g</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278430" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278426" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278422" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278351" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-kdumppae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278343" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xenpae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278339" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xen</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278335" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-vmipae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278331" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-vmi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278327" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-syms</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278323" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-source</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278319" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278315" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-kdump</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278311" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-default</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278307" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-debug</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278303" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-bigsmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278249" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner191-translations</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278245" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner191-gnomevfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278241" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner191</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278235" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gpg2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278201" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190-translations</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278197" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190-gnomevfs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278193" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mozilla-xulrunner190</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278169" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>MozillaFirefox-translations</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278161" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>MozillaFirefox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278141" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278137" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278133" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278129" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278125" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278121" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278117" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-xml</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278113" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-tk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278109" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-idle</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278105" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-gdbm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278101" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278097" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-demo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278093" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python-curses</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278089" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>python</name>
    </rpminfo_object>
  </objects>
  <states>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:283136" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.0.7-36.31</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:283080" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.8.0.14eol-0.12</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281397" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:9.5.0P2-20.7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281393" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:9.5.0P2-20.7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281389" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:9.5.0P2-20.7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281385" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:9.3.4-1.29</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281381" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:9.5.0P2-20.7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281377" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:9.5.0P2-20.7.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281190" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">2.6.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281186" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">2.7.1</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280743" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280739" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280735" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280731" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280727" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280146" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280142" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280138" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280134" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279366" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279362" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279358" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279354" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279350" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279346" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279342" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279338" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279334" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279330" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279326" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279322" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279318" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279314" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279310" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279306" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279302" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279298" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279294" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279290" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279286" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279282" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279278" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279274" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279270" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279266" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279262" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279258" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279254" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279250" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279246" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279242" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279238" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279234" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279230" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279226" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279222" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279218" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279214" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279210" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279206" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279202" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279198" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279194" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279190" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279186" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279182" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279178" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279174" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279082" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:10.26.44-101.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279078" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.0.0-657.10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279074" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.6-2.131.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279058" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.1-194.19.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279042" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.5.STABLE12-18.13.982.2.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279038" version="81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.10.14-16.41.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279034" version="81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.10.14-16.41.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278985" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278981" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278977" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278973" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278969" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278965" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278961" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278957" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.5.1-69.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278953" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.0-84.77.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278889" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.20-23.23.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278885" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.9-75.27.24.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278865" version="18" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.1.11-14.10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278843" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.6.0-43.92.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278839" version="12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.6.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278835" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278831" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278827" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278823" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278819" version="46" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.26-12.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278811" version="15" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.6-24.17.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278807" version="15" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.6-24.17.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278803" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.8-19.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278799" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.8-19.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278642" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278638" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.3.6b-42.85.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278634" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278630" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278626" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278622" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278618" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278614" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278610" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278606" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278602" version="34" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.34b</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278598" version="37" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.32-0.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278463" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.7g-13.19.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278431" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278427" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278423" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278352" version="129" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.58.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278344" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278340" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278336" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278332" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278328" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278324" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278320" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278316" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278312" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278308" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278304" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278250" version="288" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.9.1.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278246" version="288" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.9.1.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278242" version="288" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.9.1.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278236" version="6" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.0.9-25.26.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278202" version="182" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.18-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278198" version="182" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.18-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278194" version="182" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.9.0.18-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278170" version="384" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">3.5.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278162" version="384" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">3.5.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278142" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278138" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278134" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278130" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278126" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278122" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278118" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.8.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278114" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278110" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278106" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278102" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.4.2-18.29.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278098" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278094" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278090" version="27" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.0-8.9.1.1</evr>
    </rpminfo_state>
  </states>
</oval_definitions>
