<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:aix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#aix" xmlns:hpux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:independent-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:linux-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:macos-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#macos" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:sol-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix" xmlns:win-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#windows" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://oval.mitre.org/XMLSchema/oval-definitions-5 mcafee-pa-oval-definitions-schema-1.0.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#windows windows-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#independent independent-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-common-5 oval-common-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#unix unix-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#linux linux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#solaris solaris-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#macos macos-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#hpux hpux-definitions-schema.xsd http://oval.mitre.org/XMLSchema/oval-definitions-5#aix aix-definitions-schema.xsd">
  <generator>
    <oval:product_name>McAfee's OvalZilla</oval:product_name>
    <oval:product_version>Version 1.0</oval:product_version>
    <oval:schema_version>5.3</oval:schema_version>
    <oval:timestamp>2026-03-31T00:35:35-05:00</oval:timestamp>
  </generator>
  <definitions>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:293570" version="24">
      <metadata>
        <title>Test for opensc-32bit On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2235 at MITRE

Description

   OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens
   running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2235" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:293567" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:293566" version="24">
      <metadata>
        <title>Test for opensc On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-2235 at MITRE

Description

   OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens
   running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-2235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2235" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282912" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:293565" version="24">
      <metadata>
        <title>Test for apache2-mod_jk On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3382 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes () as delimiters
   in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to conduct session hijacking
   attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3382" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3382" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282814" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283024" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283023" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283022" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283021" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283020" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283019" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283018" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283017" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283016" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283015" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283014" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4933 at MITRE

Description

   Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a
   denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to
   the hfsplus_cat_build_key_uni function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4933" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4933" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283013" version="26">
      <metadata>
        <title>Test for audiofile-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
[293]CVE-2008-5824 at MITRE Description Heap-based buffer overflow in
                    msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a
                    denial of service (application crash) or possibly execute arbitrary code via a crafted WAV
                    file.
                    ________________________________________________________________________________________________________________________________________
                    [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) Novell/SUSE
                    information
</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-5824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5824" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283010" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283009" version="25">
      <metadata>
        <title>Test for audiofile On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-5824 at MITRE

Description

   Heap-based buffer overflow in msadpcm.c in libaudiofile in audiofile 0.2.6 allows context-dependent attackers to cause a denial of service
   (application crash) or possibly execute arbitrary code via a crafted WAV file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-5824" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5824" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:283006" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283005" version="25">
      <metadata>
        <title>Test for perl-SNMP On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-4309 at MITRE

Description

   Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and
   5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a
   heap-based buffer overflow, related to the number of responses or repeats.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-4309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4309" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279948" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283004" version="25">
      <metadata>
        <title>Test for net-snmp-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-4309 at MITRE

Description

   Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and
   5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a
   heap-based buffer overflow, related to the number of responses or repeats.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-4309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4309" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279944" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283003" version="25">
      <metadata>
        <title>Test for net-snmp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2008-4309 at MITRE

Description

   Integer overflow in the netsnmp_create_subtree_cache function in agent/snmp_agent.c in net-snmp 5.4 before 5.4.2.1, 5.3 before 5.3.2.3, and
   5.2 before 5.2.5.1 allows remote attackers to cause a denial of service (crash) via a crafted SNMP GETBULK request, which triggers a
   heap-based buffer overflow, related to the number of responses or repeats.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2008-4309" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4309" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279940" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:283002" version="26">
      <metadata>
        <title>Test for xterm On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2383 at MITRE

Description

   CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a
   command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and
   CVE-2003-0071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2383" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2383" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282999" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282998" version="26">
      <metadata>
        <title>Test for netatalk-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5718 at MITRE

Description

   The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to
   execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5718" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282995" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282994" version="26">
      <metadata>
        <title>Test for netatalk On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5718 at MITRE

Description

   The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to
   execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5718" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5718" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282990" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282989" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282988" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282987" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282986" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282985" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282984" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282983" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282982" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282981" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282980" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282979" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282978" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282977" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282976" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282975" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282974" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282973" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282972" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282971" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282970" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282969" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282968" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282967" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282966" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282965" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282964" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282963" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282962" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282961" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282960" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282959" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282958" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282957" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282956" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282955" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282954" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282953" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282952" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282951" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282950" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282949" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282948" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282947" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282946" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282945" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282944" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282943" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282942" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5658 at MITRE

Description

   Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write
   arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5658" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5658" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282941" version="26">
      <metadata>
        <title>Test for libvirt-python On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5086 at MITRE

Description

   Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access
   restrictions and perform administrative actions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282938" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282937" version="26">
      <metadata>
        <title>Test for libvirt-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5086 at MITRE

Description

   Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access
   restrictions and perform administrative actions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282934" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282933" version="26">
      <metadata>
        <title>Test for libvirt On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5086 at MITRE

Description

   Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access
   restrictions and perform administrative actions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282930" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282924" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2938 at MITRE

Description

   Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking
   and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different
   vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last
   affected version.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2938" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2938" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282920" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2370 at MITRE

Description

   Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path
   normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read
   arbitrary files via a .. (dot dot) in a request parameter.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2370" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2370" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282919" version="26">
      <metadata>
        <title>Test for opensc-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2235 at MITRE

Description

   OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens
   running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2235" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282916" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282915" version="26">
      <metadata>
        <title>Test for opensc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2235 at MITRE

Description

   OpenSC before 0.11.5 uses weak permissions (ADMIN file control information of 00) for the 5015 directory on smart cards and USB crypto tokens
   running Siemens CardOS M4, which allows physically proximate attackers to change the PIN.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2235" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2235" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282912" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282911" version="26">
      <metadata>
        <title>Test for websphere-as_ce On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282910" version="26">
      <metadata>
        <title>Test for tomcat55-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282795" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282909" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282791" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282908" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282787" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282907" version="26">
      <metadata>
        <title>Test for tomcat55-server-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282783" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282906" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282779" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282905" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282775" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282904" version="26">
      <metadata>
        <title>Test for tomcat55-jasper-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282771" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282903" version="26">
      <metadata>
        <title>Test for tomcat55-jasper On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282767" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282902" version="26">
      <metadata>
        <title>Test for tomcat55-common-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282763" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282901" version="26">
      <metadata>
        <title>Test for tomcat55-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282759" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282900" version="26">
      <metadata>
        <title>Test for tomcat55 On openSUSE 10.3</title>
        <description>
   [293]CVE-2008-1947 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject
   arbitrary web script or HTML via the name parameter (aka the hostname attribute) to host-manager/html/add.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2008-1947" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1947" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282755" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282896" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-1232 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16 allows remote
   attackers to inject arbitrary web script or HTML via a crafted string that is used in the message argument to the
   HttpServletResponse.sendError method.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-1232" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1232" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282895" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-0002 at MITRE

Description

   Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter
   processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this processing in
   order to trigger the exception.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-0002" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0002" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282894" version="26">
      <metadata>
        <title>Test for websphere-as_ce On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282893" version="26">
      <metadata>
        <title>Test for tomcat55-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282795" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282892" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282791" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282891" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282787" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282890" version="26">
      <metadata>
        <title>Test for tomcat55-server-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282783" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282889" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282779" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282888" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282775" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282887" version="26">
      <metadata>
        <title>Test for tomcat55-jasper-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282771" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282886" version="26">
      <metadata>
        <title>Test for tomcat55-jasper On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282767" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282885" version="26">
      <metadata>
        <title>Test for tomcat55-common-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282763" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282884" version="26">
      <metadata>
        <title>Test for tomcat55-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282759" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282883" version="26">
      <metadata>
        <title>Test for tomcat55 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-6286 at MITRE

Description

   Apache Tomcat 5.5.11 through 5.5.25 and 6.0.0 through 6.0.15, when the native APR connector is used, does not properly handle an empty
   request to the SSL port, which allows remote attackers to trigger handling of "a duplicate copy of one of the recent requests," as
   demonstrated by using netcat to send the empty request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-6286" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6286" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282755" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282882" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-5615 at MITRE

Description

   CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP
   response splitting attacks via unspecified vectors.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-5615" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5615" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282881" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-5613 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web
   script or HTML via unspecified parameters and cookies.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-5613" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5613" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282880" version="26">
      <metadata>
        <title>Test for websphere-as_ce On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282879" version="26">
      <metadata>
        <title>Test for mod_jk-ap20 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282878" version="26">
      <metadata>
        <title>Test for tomcat55-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282795" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282877" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282791" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282876" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282787" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282875" version="26">
      <metadata>
        <title>Test for tomcat55-server-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282783" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282874" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282779" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282873" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282775" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282872" version="26">
      <metadata>
        <title>Test for tomcat55-jasper-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282771" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282871" version="26">
      <metadata>
        <title>Test for tomcat55-jasper On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282767" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282870" version="26">
      <metadata>
        <title>Test for tomcat55-common-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282763" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282869" version="26">
      <metadata>
        <title>Test for tomcat55-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282759" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282868" version="26">
      <metadata>
        <title>Test for tomcat55 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282755" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282867" version="26">
      <metadata>
        <title>Test for apache2-mod_jk On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282814" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282866" version="26">
      <metadata>
        <title>Test for tomcat5-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278995" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282865" version="26">
      <metadata>
        <title>Test for tomcat5-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282864" version="26">
      <metadata>
        <title>Test for tomcat5 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5461 at MITRE

Description

   Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14,
   under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity
   with a SYSTEM tag.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5461" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5461" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278987" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282863" version="26">
      <metadata>
        <title>Test for websphere-as_ce On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282862" version="26">
      <metadata>
        <title>Test for tomcat55-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282795" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282861" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282791" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282860" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282787" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282859" version="26">
      <metadata>
        <title>Test for tomcat55-server-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282783" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282858" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282779" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282857" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282775" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282856" version="26">
      <metadata>
        <title>Test for tomcat55-jasper-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282771" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282855" version="26">
      <metadata>
        <title>Test for tomcat55-jasper On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282767" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282854" version="26">
      <metadata>
        <title>Test for tomcat55-common-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282763" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282853" version="26">
      <metadata>
        <title>Test for tomcat55-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282759" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282852" version="26">
      <metadata>
        <title>Test for tomcat55 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282755" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282851" version="26">
      <metadata>
        <title>Test for apache2-mod_jk On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-5342 at MITRE

Description

   The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict
   certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as
   demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282814" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282850" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-5333 at MITRE

Description

   Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters
   or (2) %5C (encoded backslash) sequences in a cookie value, which might cause sensitive information such as session IDs to be leaked to
   remote attackers and enable session hijacking attacks. NOTE: this issue exists because of an incomplete fix for CVE-2007-3385.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-5333" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5333" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282846" version="26">
      <metadata>
        <title>Test for websphere-as_ce On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282845" version="26">
      <metadata>
        <title>Test for tomcat55-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282795" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282844" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282791" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282843" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282787" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282842" version="26">
      <metadata>
        <title>Test for tomcat55-server-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282783" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282841" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282779" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282840" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282775" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282839" version="26">
      <metadata>
        <title>Test for tomcat55-jasper-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282771" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282838" version="26">
      <metadata>
        <title>Test for tomcat55-jasper On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282767" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282837" version="26">
      <metadata>
        <title>Test for tomcat55-common-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282763" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282836" version="26">
      <metadata>
        <title>Test for tomcat55-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282759" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282835" version="26">
      <metadata>
        <title>Test for tomcat55 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282755" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282834" version="26">
      <metadata>
        <title>Test for apache2-mod_jk On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3386 at MITRE

Description

   Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote
   attackers to inject arbitrary HTML and web script via crafted requests, as demonstrated using the aliases parameter to an html/add action.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3386" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282814" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282833" version="26">
      <metadata>
        <title>Test for websphere-as_ce On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282832" version="26">
      <metadata>
        <title>Test for mod_jk-ap20 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282829" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282828" version="26">
      <metadata>
        <title>Test for tomcat55-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282795" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282827" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282791" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282826" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282787" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282825" version="26">
      <metadata>
        <title>Test for tomcat55-server-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282783" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282824" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282779" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282823" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282775" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282822" version="26">
      <metadata>
        <title>Test for tomcat55-jasper-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282771" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282821" version="26">
      <metadata>
        <title>Test for tomcat55-jasper On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282767" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282820" version="26">
      <metadata>
        <title>Test for tomcat55-common-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282763" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282819" version="26">
      <metadata>
        <title>Test for tomcat55-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282759" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282818" version="26">
      <metadata>
        <title>Test for tomcat55 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282755" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282817" version="26">
      <metadata>
        <title>Test for apache2-mod_jk On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282814" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282813" version="26">
      <metadata>
        <title>Test for tomcat5-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278995" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282812" version="26">
      <metadata>
        <title>Test for tomcat5-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278991" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282811" version="26">
      <metadata>
        <title>Test for tomcat5 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-3385 at MITRE

Description

   Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character
   sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session
   hijacking attacks.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-3385" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3385" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278987" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282810" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-2450 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenticated users to inject
   arbitrary web script or HTML via a parameter name to manager/html/upload, and other unspecified vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 3.5 (AV:N/AC:M/Au:S/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-2450" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2450" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282806" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282802" version="26">
      <metadata>
        <title>Test for jakarta-tomcat On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282799" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282798" version="26">
      <metadata>
        <title>Test for tomcat55-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282795" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282794" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282791" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282790" version="26">
      <metadata>
        <title>Test for tomcat55-servlet-2_4-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282787" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282786" version="26">
      <metadata>
        <title>Test for tomcat55-server-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282783" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282782" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282779" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282778" version="26">
      <metadata>
        <title>Test for tomcat55-jsp-2_0-api On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282775" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282774" version="26">
      <metadata>
        <title>Test for tomcat55-jasper-javadoc On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282771" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282770" version="26">
      <metadata>
        <title>Test for tomcat55-jasper On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282767" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282766" version="26">
      <metadata>
        <title>Test for tomcat55-common-lib On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282763" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282762" version="26">
      <metadata>
        <title>Test for tomcat55-admin-webapps On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282759" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282758" version="26">
      <metadata>
        <title>Test for tomcat55 On openSUSE 10.3</title>
        <description>
   [293]CVE-2007-2449 at MITRE

Description

   Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through
   4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to inject arbitrary
   web script or HTML via the portion of the URI after the 
</description>
        <affected family="linux">
          <platform>Novell openSUSE 10.3</platform>
        </affected>
        <reference ref_id="CVE-2007-2449" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2449" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282755" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282754" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-2377 at MITRE

Description

   The Getahead Direct Web Remoting (DWR) framework 1.1.4 exchanges data using JavaScript Object Notation (JSON) without an associated
   protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute
   of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking."
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-2377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282753" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-0185 at MITRE

Description

   Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to cause a denial of service (memory exhaustion and servlet outage) via
   unknown vectors related to a large number of calls in a batch.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-0185" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0185" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282752" version="26">
      <metadata>
        <title>Test for websphere-as_ce On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-0184 at MITRE

Description

   Getahead Direct Web Remoting (DWR) before 1.1.4 allows attackers to obtain unauthorized access to public methods via a crafted request that
   bypasses the include/exclude checks.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-0184" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0184" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281319" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282748" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282747" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282746" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282745" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282744" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282743" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282742" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282741" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282740" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282739" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282738" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5079 at MITRE

Description

   net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite
   loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc
   table.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5079" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5079" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282737" version="26">
      <metadata>
        <title>Test for pam_mount On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5138 at MITRE

Description

   passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd.##### temporary file.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5138" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5138" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282734" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282733" version="26">
      <metadata>
        <title>Test for dhcp-server On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-0062 at MITRE

Description

   Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build
   56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075
   and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash)
   or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related
   to servers configured to send many DHCP options to clients.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0062" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281415" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282732" version="26">
      <metadata>
        <title>Test for dhcp-relay On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-0062 at MITRE

Description

   Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build
   56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075
   and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash)
   or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related
   to servers configured to send many DHCP options to clients.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0062" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281411" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282731" version="26">
      <metadata>
        <title>Test for dhcp-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-0062 at MITRE

Description

   Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build
   56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075
   and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash)
   or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related
   to servers configured to send many DHCP options to clients.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0062" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281407" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282730" version="26">
      <metadata>
        <title>Test for dhcp-client On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-0062 at MITRE

Description

   Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build
   56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075
   and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash)
   or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related
   to servers configured to send many DHCP options to clients.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0062" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281403" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282729" version="26">
      <metadata>
        <title>Test for dhcp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-0062 at MITRE

Description

   Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Build
   56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE before 1.0.3 Build 54075
   and ACE 2 before 2.0.1 Build 55017, and Server before 1.0.4 Build 56528; allows remote attackers to cause a denial of service (daemon crash)
   or execute arbitrary code via a malformed DHCP packet with a large dhcp-max-message-size that triggers a stack-based buffer overflow, related
   to servers configured to send many DHCP options to clients.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-0062" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0062" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281399" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282728" version="26">
      <metadata>
        <title>Test for libmikmod On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0179 at MITRE

Description

   libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service
   (application crash) by loading an XM file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0179" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0179" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282727" version="26">
      <metadata>
        <title>Test for compat-curl2 On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0037 at MITRE

Description

   The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location
   values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files
   via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282724" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282723" version="26">
      <metadata>
        <title>Test for curl-devel On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0037 at MITRE

Description

   The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location
   values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files
   via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282720" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282719" version="26">
      <metadata>
        <title>Test for curl On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0037 at MITRE

Description

   The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location
   values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files
   via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0037" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0037" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282716" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282715" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282714" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282713" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282712" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282711" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282710" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282709" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282708" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282707" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282706" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282705" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5352 at MITRE

Description

   Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK
   and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted applications and applets to gain privileges via
   a Pack200 compressed JAR file that triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282704" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5347 at MITRE

Description

   Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets
   and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5347" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282703" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5347 at MITRE

Description

   Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets
   and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5347" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282702" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5347 at MITRE

Description

   Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets
   and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5347" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282701" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5347 at MITRE

Description

   Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets
   and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5347" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282700" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for IPF</title>
        <description>
   [293]CVE-2008-5347 at MITRE

Description

   Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets
   and applications to gain privileges via vectors related to access to inner classes in the (1) JAX-WS and (2) JAXB packages.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IPF</platform>
        </affected>
        <reference ref_id="CVE-2008-5347" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5347" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282699" version="26">
      <metadata>
        <title>Test for libmikmod On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6720 at MITRE

Description

   libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded
   song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of
   service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6720" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6720" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282698" version="26">
      <metadata>
        <title>Test for liblcms-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0733 at MITRE

Description

   Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox
   3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large
   integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0733" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282675" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282697" version="26">
      <metadata>
        <title>Test for liblcms On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0733 at MITRE

Description

   Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox
   3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute arbitrary code via a crafted image file associated with a large
   integer value for the (1) input or (2) output channel, related to the ReadLUT_A2B and ReadLUT_B2A functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0733" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0733" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282671" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282696" version="26">
      <metadata>
        <title>Test for liblcms-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0723 at MITRE

Description

   Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow
   context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of
   these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0723" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0723" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282675" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282695" version="26">
      <metadata>
        <title>Test for liblcms On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0723 at MITRE

Description

   Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow
   context-dependent attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow. NOTE: some of
   these details are obtained from third party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0723" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0723" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282671" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282694" version="26">
      <metadata>
        <title>Test for libgimpprint-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281875" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282693" version="26">
      <metadata>
        <title>Test for libgimpprint On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281871" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282692" version="26">
      <metadata>
        <title>Test for ghostscript-x11 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281867" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282691" version="26">
      <metadata>
        <title>Test for ghostscript-omni On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282690" version="26">
      <metadata>
        <title>Test for ghostscript-library On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281859" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282689" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-std On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281855" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282688" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-rus On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281851" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282687" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-other On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0584 at MITRE

Description

   icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and earlier and Argyll Color
   Management System (CMS) 1.0.3 and earlier, allows context-dependent attackers to cause a denial of service (application crash) or possibly
   execute arbitrary code by using a device file for processing a crafted image file associated with large integer values for certain sizes,
   related to an ICC profile in a (1) PostScript or (2) PDF file with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0584" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0584" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281847" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282686" version="26">
      <metadata>
        <title>Test for libgimpprint-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281875" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282685" version="26">
      <metadata>
        <title>Test for libgimpprint On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281871" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282684" version="26">
      <metadata>
        <title>Test for ghostscript-x11 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281867" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282683" version="26">
      <metadata>
        <title>Test for ghostscript-omni On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282682" version="26">
      <metadata>
        <title>Test for ghostscript-library On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281859" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282681" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-std On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281855" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282680" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-rus On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281851" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282679" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-other On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0583 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0583" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0583" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281847" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282678" version="26">
      <metadata>
        <title>Test for liblcms-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0581 at MITRE

Description

   Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent
   attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0581" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282675" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282674" version="26">
      <metadata>
        <title>Test for liblcms On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0581 at MITRE

Description

   Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent
   attackers to cause a denial of service (memory consumption and application crash) via a crafted image file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0581" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0581" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282671" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282670" version="26">
      <metadata>
        <title>Test for vim On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2712 at MITRE

Description

   Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly
   sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5)
   netrw. NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298. NOTE: the
   zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2712" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282667" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282666" version="26">
      <metadata>
        <title>Test for gvim On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2712 at MITRE

Description

   Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly
   sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5)
   netrw. NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298. NOTE: the
   zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2712" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2712" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282663" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282656" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282655" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282654" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282653" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282652" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282651" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282650" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282649" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282648" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282647" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282646" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-1294 at MITRE

Description

   Linux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set RLIMIT_CPU to 0 until after the change is
   made, which allows local users to bypass intended resource limits.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-1294" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1294" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282645" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282644" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282643" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282642" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282641" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282640" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282639" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282638" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282637" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282636" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282635" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282634" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282633" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282632" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282631" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282630" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282629" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282628" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282627" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282626" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282625" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282624" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282623" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282622" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282621" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282620" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282619" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282618" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282617" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282616" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282615" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282614" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282613" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282612" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282611" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282610" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282609" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282608" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282607" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282606" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282605" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282604" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282603" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282602" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282601" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282600" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282599" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282598" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282597" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0754 at MITRE

Description

   PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web
   server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on
   the same server.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0754" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0754" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282596" version="26">
      <metadata>
        <title>Test for libsndfile-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0186 at MITRE

Description

   Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via
   crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0186" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282593" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282592" version="26">
      <metadata>
        <title>Test for libsndfile On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0186 at MITRE

Description

   Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via
   crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0186" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0186" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282589" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282588" version="26">
      <metadata>
        <title>Test for multipath-tools On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0115 at MITRE

Description

   The Device Mapper multipathing driver (aka multipath-tools or device-mapper-multipath) 0.4.8, as used in SUSE openSUSE, SUSE Linux Enterprise
   Server (SLES), Fedora, and possibly other operating systems, uses world-writable permissions for the socket file (aka
   /var/run/multipathd.sock), which allows local users to send arbitrary commands to the multipath daemon.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0115" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0115" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282585" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282584" version="26">
      <metadata>
        <title>Test for xntp-doc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0021 at MITRE

Description

   NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which
   allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar
   vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0021" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280170" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282583" version="26">
      <metadata>
        <title>Test for xntp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0021 at MITRE

Description

   NTP 4.2.4 before 4.2.4p5 and 4.2.5 before 4.2.5p150 does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which
   allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar
   vulnerability to CVE-2008-5077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0021" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0021" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280166" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282582" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282581" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282580" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282579" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282578" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282577" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282576" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282575" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282574" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282573" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282572" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282571" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282570" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282569" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282568" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282567" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282566" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282565" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282564" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282563" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282562" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282561" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282560" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282559" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282558" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282557" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282556" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282555" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282554" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282553" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282552" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282551" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282550" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282549" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282548" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282547" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282546" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282545" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282544" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282543" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282542" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282541" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282540" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282539" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282538" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282537" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282536" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282535" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282534" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5557 at MITRE

Description

   Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows
   context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during
   Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5557" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5557" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282533" version="26">
      <metadata>
        <title>Test for php5-zlib On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282532" version="26">
      <metadata>
        <title>Test for php5-xsl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282531" version="26">
      <metadata>
        <title>Test for php5-xmlrpc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282530" version="26">
      <metadata>
        <title>Test for php5-xmlreader On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282529" version="26">
      <metadata>
        <title>Test for php5-wddx On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282528" version="26">
      <metadata>
        <title>Test for php5-tokenizer On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282527" version="26">
      <metadata>
        <title>Test for php5-sysvshm On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282526" version="26">
      <metadata>
        <title>Test for php5-sysvsem On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282525" version="26">
      <metadata>
        <title>Test for php5-sysvmsg On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282524" version="26">
      <metadata>
        <title>Test for php5-suhosin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279328" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282523" version="26">
      <metadata>
        <title>Test for php5-sqlite On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279324" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282522" version="26">
      <metadata>
        <title>Test for php5-sockets On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279320" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282521" version="26">
      <metadata>
        <title>Test for php5-soap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279316" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282520" version="26">
      <metadata>
        <title>Test for php5-snmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279312" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282519" version="26">
      <metadata>
        <title>Test for php5-shmop On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279308" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282518" version="26">
      <metadata>
        <title>Test for php5-pspell On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282517" version="26">
      <metadata>
        <title>Test for php5-posix On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282516" version="26">
      <metadata>
        <title>Test for php5-pgsql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279296" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282515" version="26">
      <metadata>
        <title>Test for php5-pear On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279292" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282514" version="26">
      <metadata>
        <title>Test for php5-pdo On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279288" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282513" version="26">
      <metadata>
        <title>Test for php5-pcntl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279284" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282512" version="26">
      <metadata>
        <title>Test for php5-openssl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279280" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282511" version="26">
      <metadata>
        <title>Test for php5-odbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279276" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282510" version="26">
      <metadata>
        <title>Test for php5-ncurses On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279272" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282509" version="26">
      <metadata>
        <title>Test for php5-mysql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279268" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282508" version="26">
      <metadata>
        <title>Test for php5-mhash On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279264" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282507" version="26">
      <metadata>
        <title>Test for php5-mcrypt On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279260" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282506" version="26">
      <metadata>
        <title>Test for php5-mbstring On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279256" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282505" version="26">
      <metadata>
        <title>Test for php5-ldap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279252" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282504" version="26">
      <metadata>
        <title>Test for php5-json On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279248" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282503" version="26">
      <metadata>
        <title>Test for php5-imap On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279244" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282502" version="26">
      <metadata>
        <title>Test for php5-iconv On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279240" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282501" version="26">
      <metadata>
        <title>Test for php5-gmp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279236" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282500" version="26">
      <metadata>
        <title>Test for php5-gettext On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279232" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282499" version="26">
      <metadata>
        <title>Test for php5-gd On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279228" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282498" version="26">
      <metadata>
        <title>Test for php5-ftp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279224" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282497" version="26">
      <metadata>
        <title>Test for php5-fastcgi On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279220" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282496" version="26">
      <metadata>
        <title>Test for php5-exif On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279216" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282495" version="26">
      <metadata>
        <title>Test for php5-dom On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279212" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282494" version="26">
      <metadata>
        <title>Test for php5-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279208" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282493" version="26">
      <metadata>
        <title>Test for php5-dbase On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279204" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282492" version="26">
      <metadata>
        <title>Test for php5-dba On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279200" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282491" version="26">
      <metadata>
        <title>Test for php5-curl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279196" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282490" version="26">
      <metadata>
        <title>Test for php5-ctype On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279192" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282489" version="26">
      <metadata>
        <title>Test for php5-calendar On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279188" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282488" version="26">
      <metadata>
        <title>Test for php5-bz2 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279184" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282487" version="26">
      <metadata>
        <title>Test for php5-bcmath On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279180" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282486" version="26">
      <metadata>
        <title>Test for php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279176" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282485" version="26">
      <metadata>
        <title>Test for apache2-mod_php5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5498 at MITRE

Description

   Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary
   memory locations via a crafted value of the third argument (aka the bgd_color or clrBack argument) for an indexed image.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5498" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5498" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279172" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282484" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5358 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a
   crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5358" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282483" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5358 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a
   crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5358" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282482" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5358 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a
   crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5358" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282481" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5358 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a
   crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5358" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282480" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5358 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a
   crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5358" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5358" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282479" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282478" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282477" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282476" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282475" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282474" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282473" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282472" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282471" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282470" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282469" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5341 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update
   16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors,
   aka CR 6727071.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5341" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5341" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282468" version="26">
      <metadata>
        <title>Test for krb5-server On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0847 at MITRE

Description

   The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a
   denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations
   with pointer arithmetic.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279976" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282467" version="26">
      <metadata>
        <title>Test for krb5-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0847 at MITRE

Description

   The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a
   denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations
   with pointer arithmetic.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279972" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282466" version="26">
      <metadata>
        <title>Test for krb5-client On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0847 at MITRE

Description

   The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a
   denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations
   with pointer arithmetic.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279968" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282465" version="26">
      <metadata>
        <title>Test for krb5-apps-servers On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0847 at MITRE

Description

   The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a
   denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations
   with pointer arithmetic.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279964" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282464" version="26">
      <metadata>
        <title>Test for krb5-apps-clients On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0847 at MITRE

Description

   The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a
   denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations
   with pointer arithmetic.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279960" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282463" version="26">
      <metadata>
        <title>Test for krb5 On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0847 at MITRE

Description

   The asn1buf_imbed function in the ASN.1 decoder in MIT Kerberos 5 (aka krb5) 1.6.3, when PK-INIT is used, allows remote attackers to cause a
   denial of service (application crash) via a crafted length value that triggers an erroneous malloc call, related to incorrect calculations
   with pointer arithmetic.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0847" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0847" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279956" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282462" version="26">
      <metadata>
        <title>Test for krb5-server On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0846 at MITRE

Description

   The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before
   1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid
   DER encoding that triggers a free of an uninitialized pointer.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279976" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282461" version="26">
      <metadata>
        <title>Test for krb5-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0846 at MITRE

Description

   The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before
   1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid
   DER encoding that triggers a free of an uninitialized pointer.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279972" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282460" version="26">
      <metadata>
        <title>Test for krb5-client On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0846 at MITRE

Description

   The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before
   1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid
   DER encoding that triggers a free of an uninitialized pointer.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279968" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282459" version="26">
      <metadata>
        <title>Test for krb5-apps-servers On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0846 at MITRE

Description

   The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before
   1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid
   DER encoding that triggers a free of an uninitialized pointer.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279964" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282458" version="26">
      <metadata>
        <title>Test for krb5-apps-clients On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0846 at MITRE

Description

   The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before
   1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid
   DER encoding that triggers a free of an uninitialized pointer.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279960" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282457" version="26">
      <metadata>
        <title>Test for krb5 On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0846 at MITRE

Description

   The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) before
   1.6.4 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via vectors involving an invalid
   DER encoding that triggers a free of an uninitialized pointer.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0846" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0846" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279956" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282456" version="26">
      <metadata>
        <title>Test for krb5-server On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0845 at MITRE

Description

   The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is
   used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the
   reqFlags field in a negTokenInit token.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279976" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282455" version="26">
      <metadata>
        <title>Test for krb5-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0845 at MITRE

Description

   The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is
   used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the
   reqFlags field in a negTokenInit token.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279972" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282454" version="26">
      <metadata>
        <title>Test for krb5-client On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0845 at MITRE

Description

   The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is
   used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the
   reqFlags field in a negTokenInit token.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279968" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282453" version="26">
      <metadata>
        <title>Test for krb5-apps-servers On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0845 at MITRE

Description

   The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is
   used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the
   reqFlags field in a negTokenInit token.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279964" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282452" version="26">
      <metadata>
        <title>Test for krb5-apps-clients On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0845 at MITRE

Description

   The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is
   used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the
   reqFlags field in a negTokenInit token.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279960" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282451" version="26">
      <metadata>
        <title>Test for krb5 On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0845 at MITRE

Description

   The spnego_gss_accept_sec_context function in lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3, when SPNEGO is
   used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via invalid ContextFlags data in the
   reqFlags field in a negTokenInit token.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0845" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0845" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279956" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282450" version="26">
      <metadata>
        <title>Test for krb5-server On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0844 at MITRE

Description

   The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a
   denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279976" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282449" version="26">
      <metadata>
        <title>Test for krb5-devel On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0844 at MITRE

Description

   The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a
   denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279972" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282448" version="26">
      <metadata>
        <title>Test for krb5-client On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0844 at MITRE

Description

   The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a
   denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279968" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282447" version="26">
      <metadata>
        <title>Test for krb5-apps-servers On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0844 at MITRE

Description

   The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a
   denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279964" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282446" version="26">
      <metadata>
        <title>Test for krb5-apps-clients On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0844 at MITRE

Description

   The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a
   denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279960" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282445" version="26">
      <metadata>
        <title>Test for krb5 On SUSE Linux Enterprise Server 10 SP2 for IBM POWER</title>
        <description>
   [293]CVE-2009-0844 at MITRE

Description

   The get_input_token function in the SPNEGO implementation in MIT Kerberos 5 (aka krb5) 1.5 through 1.6.3 allows remote attackers to cause a
   denial of service (daemon crash) and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM POWER</platform>
        </affected>
        <reference ref_id="CVE-2009-0844" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0844" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279956" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282444" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0776 at MITRE

Description

   nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the
   same-origin policy and read XML data from another domain via a cross-domain redirect.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0776" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282443" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0776 at MITRE

Description

   nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the
   same-origin policy and read XML data from another domain via a cross-domain redirect.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0776" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0776" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282442" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0774 at MITRE

Description

   The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause
   a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0774" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0774" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282441" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0774 at MITRE

Description

   The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause
   a denial of service (crash) and possibly execute arbitrary code via vectors related to gczeal, a different vulnerability than CVE-2009-0773.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0774" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0774" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282440" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0772 at MITRE

Description

   The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause
   a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage
   collection, which triggers memory corruption.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0772" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282439" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0772 at MITRE

Description

   The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause
   a denial of service (crash) and possibly execute arbitrary code via vectors related to nsCSSStyleSheet::GetOwnerNode, events, and garbage
   collection, which triggers memory corruption.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0772" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0772" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282438" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0353 at MITRE

Description

   Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote
   attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to
   the JavaScript engine.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282437" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0353 at MITRE

Description

   Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote
   attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to
   the JavaScript engine.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282436" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0352 at MITRE

Description

   Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282435" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0352 at MITRE

Description

   Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow
   remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors
   related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0352" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0352" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282434" version="26">
      <metadata>
        <title>Test for libpng-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0040 at MITRE

Description

   The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows
   context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that
   triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278801" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282433" version="26">
      <metadata>
        <title>Test for libpng On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0040 at MITRE

Description

   The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows
   context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that
   triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278797" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282432" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0040 at MITRE

Description

   The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows
   context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that
   triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282431" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0040 at MITRE

Description

   The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows
   context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file that
   triggers a free of an uninitialized pointer in (1) the png_read_png function, (2) pCAL chunk handling, or (3) setup of 16-bit gamma tables.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0040" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0040" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282430" version="26">
      <metadata>
        <title>Test for MozillaFirefox-translations On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-1169 at MITRE

Description

   The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to
   cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-1169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1169" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282429" version="26">
      <metadata>
        <title>Test for MozillaFirefox On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-1169 at MITRE

Description

   The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to
   cause a denial of service (crash) and possibly execute arbitrary code via an XML file with a crafted XSLT transform.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-1169" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1169" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282424" version="26">
      <metadata>
        <title>Test for postgresql-server On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0922 at MITRE

Description

   PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption
   and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using
   mismatched encoding conversion requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280004" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282423" version="26">
      <metadata>
        <title>Test for postgresql-libs On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0922 at MITRE

Description

   PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption
   and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using
   mismatched encoding conversion requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279996" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282422" version="26">
      <metadata>
        <title>Test for postgresql-docs On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0922 at MITRE

Description

   PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption
   and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using
   mismatched encoding conversion requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279992" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282421" version="26">
      <metadata>
        <title>Test for postgresql-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0922 at MITRE

Description

   PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption
   and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using
   mismatched encoding conversion requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279988" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282420" version="26">
      <metadata>
        <title>Test for postgresql-contrib On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0922 at MITRE

Description

   PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption
   and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using
   mismatched encoding conversion requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279984" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282419" version="26">
      <metadata>
        <title>Test for postgresql On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0922 at MITRE

Description

   PostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to cause a denial of service (stack consumption
   and crash) by triggering a failure in the conversion of a localized error message to a client-specified encoding, as demonstrated using
   mismatched encoding conversion requests.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.0 (AV:N/AC:L/Au:S/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0922" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0922" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279980" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282418" version="26">
      <metadata>
        <title>Test for strongswan-doc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0790 at MITRE

Description

   The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8
   before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2)
   R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent
   ISAKMP state and the lack of a phase2 state association in DPD.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0790" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280621" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282417" version="26">
      <metadata>
        <title>Test for strongswan On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0790 at MITRE

Description

   The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8
   before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2)
   R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent
   ISAKMP state and the lack of a phase2 state association in DPD.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0790" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280617" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282416" version="26">
      <metadata>
        <title>Test for openswan On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0790 at MITRE

Description

   The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8
   before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2)
   R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent
   ISAKMP state and the lack of a phase2 state association in DPD.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0790" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0790" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280625" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282415" version="26">
      <metadata>
        <title>Test for NetworkManager-glib On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0578 at MITRE

Description

   GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local
   users to change or remove the network connections of arbitrary users via unspecified vectors related to
   org.freedesktop.NetworkManagerUserSettings and at_console.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.2 (AV:L/AC:L/Au:S/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0578" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282404" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282414" version="26">
      <metadata>
        <title>Test for NetworkManager-devel On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0578 at MITRE

Description

   GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local
   users to change or remove the network connections of arbitrary users via unspecified vectors related to
   org.freedesktop.NetworkManagerUserSettings and at_console.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.2 (AV:L/AC:L/Au:S/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0578" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282400" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282413" version="26">
      <metadata>
        <title>Test for NetworkManager On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0578 at MITRE

Description

   GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local
   users to change or remove the network connections of arbitrary users via unspecified vectors related to
   org.freedesktop.NetworkManagerUserSettings and at_console.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.2 (AV:L/AC:L/Au:S/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0578" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282396" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282412" version="26">
      <metadata>
        <title>Test for NetworkManager-gnome On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0578 at MITRE

Description

   GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local
   users to change or remove the network connections of arbitrary users via unspecified vectors related to
   org.freedesktop.NetworkManagerUserSettings and at_console.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.2 (AV:L/AC:L/Au:S/C:N/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0578" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0578" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282392" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282411" version="26">
      <metadata>
        <title>Test for NetworkManager-kde On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0365 at MITRE

Description

   nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network
   connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:L/AC:L/Au:S/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0365" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282408" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282407" version="26">
      <metadata>
        <title>Test for NetworkManager-glib On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0365 at MITRE

Description

   nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network
   connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:L/AC:L/Au:S/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0365" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282404" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282403" version="26">
      <metadata>
        <title>Test for NetworkManager-devel On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0365 at MITRE

Description

   nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network
   connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:L/AC:L/Au:S/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0365" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282400" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282399" version="26">
      <metadata>
        <title>Test for NetworkManager On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0365 at MITRE

Description

   nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network
   connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:L/AC:L/Au:S/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0365" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282396" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282395" version="26">
      <metadata>
        <title>Test for NetworkManager-gnome On SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0365 at MITRE

Description

   nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network
   connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.6 (AV:L/AC:L/Au:S/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0365" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0365" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282392" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282391" version="26">
      <metadata>
        <title>Test for gnutls-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4989 at MITRE

Description

   The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the
   last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate
   for any Distinguished Name (DN).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282388" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282387" version="26">
      <metadata>
        <title>Test for gnutls On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4989 at MITRE

Description

   The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the
   last certificate is an arbitrary trusted, self-signed certificate, which allows man-in-the-middle attackers to insert a spoofed certificate
   for any Distinguished Name (DN).
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4989" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4989" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282384" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282383" version="26">
      <metadata>
        <title>Test for hal-gnome On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282380" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282379" version="26">
      <metadata>
        <title>Test for hal-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282376" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282375" version="26">
      <metadata>
        <title>Test for hal On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282372" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282371" version="26">
      <metadata>
        <title>Test for dbus-1-x11 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282368" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282367" version="26">
      <metadata>
        <title>Test for dbus-1-qt3-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282364" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282363" version="26">
      <metadata>
        <title>Test for dbus-1-qt3 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282360" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282359" version="26">
      <metadata>
        <title>Test for dbus-1-python On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282356" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282355" version="26">
      <metadata>
        <title>Test for dbus-1-mono On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282352" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282351" version="26">
      <metadata>
        <title>Test for dbus-1-java On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282348" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282347" version="26">
      <metadata>
        <title>Test for dbus-1-gtk On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282344" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282343" version="26">
      <metadata>
        <title>Test for dbus-1-glib On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282340" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282339" version="26">
      <metadata>
        <title>Test for dbus-1-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282336" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282335" version="26">
      <metadata>
        <title>Test for dbus-1 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-4311 at MITRE

Description

   The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local
   users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages,
   related to receive_requested_reply.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-4311" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4311" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282332" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282331" version="26">
      <metadata>
        <title>Test for cups-libs On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0163 at MITRE

Description

   Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon
   crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in
   the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282330" version="26">
      <metadata>
        <title>Test for cups-devel On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0163 at MITRE

Description

   Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon
   crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in
   the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282329" version="26">
      <metadata>
        <title>Test for cups-client On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0163 at MITRE

Description

   Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon
   crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in
   the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282328" version="26">
      <metadata>
        <title>Test for cups On SUSE Linux Enterprise Desktop 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0163 at MITRE

Description

   Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon
   crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in
   the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Desktop 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0163" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0163" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282327" version="25">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1303 at MITRE

Description

   The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause
   a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1303" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282326" version="25">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1303 at MITRE

Description

   The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause
   a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1303" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1303" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282325" version="25">
      <metadata>
        <title>Test for freetype2-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0946 at MITRE

Description

   Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values
   in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282321" version="25">
      <metadata>
        <title>Test for freetype2 On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0946 at MITRE

Description

   Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values
   in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0946" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0946" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282317" version="25">
      <metadata>
        <title>Test for compat-openssl097g On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0789 at MITRE

Description

   OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote
   attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a
   certificate, as demonstrated by an RSA public key.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278461" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282316" version="25">
      <metadata>
        <title>Test for openssl-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0789 at MITRE

Description

   OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote
   attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a
   certificate, as demonstrated by an RSA public key.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282315" version="25">
      <metadata>
        <title>Test for openssl-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0789 at MITRE

Description

   OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote
   attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a
   certificate, as demonstrated by an RSA public key.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282314" version="25">
      <metadata>
        <title>Test for openssl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0789 at MITRE

Description

   OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote
   attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a
   certificate, as demonstrated by an RSA public key.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0789" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0789" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282313" version="25">
      <metadata>
        <title>Test for MozillaFirefox-translations On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0652 at MITRE

Description

   The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and
   SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as
   demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability
   than CVE-2005-0233. NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0652" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278168" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282312" version="25">
      <metadata>
        <title>Test for MozillaFirefox On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0652 at MITRE

Description

   The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and
   SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as
   demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability
   than CVE-2005-0233. NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:N/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0652" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0652" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278160" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282311" version="25">
      <metadata>
        <title>Test for compat-openssl097g On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0590 at MITRE

Description

   The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and
   application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278461" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282310" version="25">
      <metadata>
        <title>Test for openssl-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0590 at MITRE

Description

   The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and
   application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282309" version="25">
      <metadata>
        <title>Test for openssl-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0590 at MITRE

Description

   The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and
   application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282308" version="25">
      <metadata>
        <title>Test for openssl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0590 at MITRE

Description

   The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and
   application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0590" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282307" version="25">
      <metadata>
        <title>Test for libsoup-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0585 at MITRE

Description

   Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows
   context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0585" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282304" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282303" version="25">
      <metadata>
        <title>Test for libsoup On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0585 at MITRE

Description

   Integer overflow in the soup_base64_encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows
   context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0585" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0585" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:282300" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282299" version="25">
      <metadata>
        <title>Test for evolution-data-server-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-0582 at MITRE

Description

   The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka
   evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x versions, does not validate whether a certain length value is
   consistent with the amount of data in a challenge packet, which allows remote mail servers to read information from the process memory of a
   client, or cause a denial of service (client crash), via an NTLM authentication type 2 packet with a length value that exceeds the amount of
   packet data.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0582" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0582" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278841" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282298" version="26">
      <metadata>
        <title>Test for evolution-data-server On Suse Linux Enterprise server(x86 platform)</title>
        <description>
[293]CVE-2009-0582 at MITRE Description The ntlm_challenge function in the
                    NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data
                    Server (aka evolution-data-server) 2.24.5 and earlier, and 2.25.92 and earlier 2.25.x
                    versions, does not validate whether a certain length value is consistent with the amount of
                    data in a challenge packet, which allows remote mail servers to read information from the
                    process memory of a client, or cause a denial of service (client crash), via an NTLM
                    authentication type 2 packet with a length value that exceeds the amount of packet data.
                    ________________________________________________________________________________________________________________________________________
                    [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:N/A:P) Novell/SUSE
                    information
</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-0582" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0582" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278837" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282297" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282296" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282295" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282294" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282293" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282292" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282291" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282290" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282289" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282288" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282287" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282286" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282285" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282284" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282283" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5360 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and
   earlier; and SDK and JRE 1.3.1_23 and earlier creates temporary files with predictable file names, which allows attackers to write malicious
   JAR files via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5360" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5360" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282282" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282281" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282280" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282279" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282278" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282277" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282276" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282275" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282274" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282273" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282272" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282271" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282270" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282269" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282268" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5359 at MITRE

Description

   Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and
   JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a
   ConvolveOp operation in the Java AWT library.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5359" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5359" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282267" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282266" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282265" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282264" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282263" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282262" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282261" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282260" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282259" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282258" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282257" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282256" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282255" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282254" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282253" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5357 at MITRE

Description

   Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK
   and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted
   TrueType font file, which triggers a heap-based buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5357" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5357" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282252" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282251" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282250" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282249" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282248" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282247" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282246" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282245" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282244" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282243" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282242" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282241" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282240" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282239" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282238" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5356 at MITRE

Description

   Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5356" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5356" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282237" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282236" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282235" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282234" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282233" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282232" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282231" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282230" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282229" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282228" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282227" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282226" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282225" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282224" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282223" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5354 at MITRE

Description

   Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary
   code via a JAR file with a long Main-Class manifest entry.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5354" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5354" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282222" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282221" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282220" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282219" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282218" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282217" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282216" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282215" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282214" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282213" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282212" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282211" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282210" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282209" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282208" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5353 at MITRE

Description

   The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run
   untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5353" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5353" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282207" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282206" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282205" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282204" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282203" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282202" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282201" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282200" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282199" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282198" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282197" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282196" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282195" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282194" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282193" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5351 at MITRE

Description

   Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier accepts UTF-8 encodings that are not the "shortest" form, which makes it easier for attackers to bypass protection mechanisms for
   other applications that rely on shortest-form UTF-8 encodings.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5351" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5351" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282192" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282191" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282190" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282189" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282188" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282187" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282186" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282185" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282184" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282183" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282182" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282181" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282180" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282179" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282178" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5348 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; and SDK and JRE 1.4.2_18 and earlier, when using Kerberos authentication, allows remote attackers to cause a denial of service (OS
   resource consumption) via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5348" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5348" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282177" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282176" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282175" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282174" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282173" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282172" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282171" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282170" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282169" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282168" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282167" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282166" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282165" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282164" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282163" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5346 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;
   and SDK and JRE 1.3.1_23 or earlier allows untrusted applets and applications to read arbitrary memory via a crafted ZIP file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.1 (AV:N/AC:M/Au:N/C:C/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5346" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5346" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282162" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282161" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282160" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282159" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282158" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282157" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282156" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282155" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282154" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282153" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282152" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282151" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282150" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282149" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282148" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5345 at MITRE

Description

   Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and
   earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier allows code that is loaded from a local filesystem to read
   arbitrary files and make unauthorized connections to localhost via unknown vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5345" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5345" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282147" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282146" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282145" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282144" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282143" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282142" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282141" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282140" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282139" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282138" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282137" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282136" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282135" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282134" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282133" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5344 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted applets to read arbitrary files and make unauthorized network connections
   via unknown vectors related to applet classloading, aka 6716217.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5344" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5344" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282132" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282131" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282130" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282129" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282128" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282127" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282126" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282125" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282124" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282123" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282122" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282121" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282120" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282119" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282118" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5343 at MITRE

Description

   Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE
   1.4.2_18 and earlier allows remote attackers to make unauthorized network connections and hijack HTTP sessions via a crafted file that
   validates as both a GIF and a Java JAR file, aka "GIFAR" and CR 6707535.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.0 (AV:N/AC:L/Au:N/C:C/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5343" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5343" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282117" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282116" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282115" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282114" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282113" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282112" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282111" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282110" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282109" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282108" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282107" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282106" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282105" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282104" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282103" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5342 at MITRE

Description

   Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and
   JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted downloaded applications to cause local files to be
   displayed in the browser of the user of the untrusted application via unknown vectors, aka 6767668.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5342" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5342" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282102" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282101" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282100" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282099" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282098" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282097" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282096" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282095" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282094" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282093" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282092" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282091" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282090" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282089" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282088" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5340 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to gain privileges to access local files or applications
   via unknown vectors, aka 6727081.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5340" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5340" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282087" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282086" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282085" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282084" version="26">
      <metadata>
        <title>Test for java-1_4_2-ibm On SUSE Linux Enterprise Server 10 SP1 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP1 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282083" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282082" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282081" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282080" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282079" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282078" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282077" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282076" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282075" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282074" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282073" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-5339 at MITRE

Description

   Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16
   and earlier; and SDK and JRE 1.4.2_18 and earlier allows untrusted JWS applications to perform network connections to unauthorized hosts via
   unknown vectors, aka CR 6727079.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-5339" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5339" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282072" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282071" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282070" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282069" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282068" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282067" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282066" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282065" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282064" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282063" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282062" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3114 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x
   before 1.4.2_18 allows context-dependent attackers to obtain sensitive information (the cache location) via an untrusted application, aka CR
   6704074.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3114" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3114" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282057" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282056" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282055" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282054" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282053" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282052" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282051" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282050" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282049" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282048" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282047" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3113 at MITRE

Description

   Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote
   attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3113" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3113" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282042" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282041" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282040" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282039" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282038" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282037" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282036" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282035" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282034" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282033" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282032" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-3112 at MITRE

Description

   Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE
   1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-3112" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3112" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282018" version="26">
      <metadata>
        <title>Test for java-1_5_0-ibm On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282017" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-plugin On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280741" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282016" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-jdbc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280737" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282015" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280733" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282014" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun-alsa On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280729" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282013" version="26">
      <metadata>
        <title>Test for java-1_4_2-sun On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-2086 at MITRE

Description

   Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18
   and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs, or
   (3) user.home System Properties, aka "Java Web Start File Inclusion" and CR 6694892.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-2086" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2086" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280725" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282012" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282011" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282010" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282009" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282008" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282007" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282006" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282005" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282004" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282003" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282002" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0835 at MITRE

Description

   The __secure_computing function in kernel/seccomp.c in the seccomp subsystem in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform,
   when CONFIG_SECCOMP is enabled, does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit
   syscall, which allows local users to bypass intended access restrictions via crafted syscalls that are misinterpreted as (a) stat or (b)
   chmod, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0835" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0835" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282001" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:282000" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281999" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281998" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281997" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281996" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281995" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281994" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281993" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281992" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281991" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0834 at MITRE

Description

   The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit
   process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, which allows local users to bypass certain syscall audit
   configurations via crafted syscalls, a related issue to CVE-2009-0342 and CVE-2009-0343.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0834" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0834" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281990" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281989" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281988" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281987" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281986" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281985" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281984" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281983" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281982" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281981" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281980" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0675 at MITRE

Description

   The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
   CAP_NET_ADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics,
   related to an "inverted logic" issue.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0675" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281979" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281978" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281977" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281976" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281975" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281974" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281973" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281972" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281971" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281970" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281969" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0065 at MITRE

Description

   Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before
   2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FORWARD-TSN) chunk with a large stream ID.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0065" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0065" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281968" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281967" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281966" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281965" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281964" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281963" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281962" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281961" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281960" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281959" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281958" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0028 at MITRE

Description

   The clone system call in the Linux kernel 2.6.28 and earlier allows local users to send arbitrary signals to a parent process from an
   unprivileged child process by launching an additional child process with the CLONE_PARENT flag, and then letting this new process exit.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0028" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281957" version="25">
      <metadata>
        <title>Test for openssl-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1379 at MITRE

Description

   Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote
   attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated
   by a packet from a server that uses a crafted server certificate.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281956" version="25">
      <metadata>
        <title>Test for openssl-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1379 at MITRE

Description

   Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote
   attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated
   by a packet from a server that uses a crafted server certificate.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281955" version="25">
      <metadata>
        <title>Test for openssl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1379 at MITRE

Description

   Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote
   attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated
   by a packet from a server that uses a crafted server certificate.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1379" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1379" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281954" version="25">
      <metadata>
        <title>Test for openssl-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1378 at MITRE

Description

   Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow
   remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much
   greater than current sequence numbers, aka "DTLS fragment handling memory leak."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281953" version="25">
      <metadata>
        <title>Test for openssl-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1378 at MITRE

Description

   Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow
   remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much
   greater than current sequence numbers, aka "DTLS fragment handling memory leak."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281952" version="25">
      <metadata>
        <title>Test for openssl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1378 at MITRE

Description

   Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow
   remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much
   greater than current sequence numbers, aka "DTLS fragment handling memory leak."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1378" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1378" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281951" version="25">
      <metadata>
        <title>Test for openssl-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1377 at MITRE

Description

   The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of
   service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer
   limitation bug."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278429" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281950" version="25">
      <metadata>
        <title>Test for openssl-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1377 at MITRE

Description

   The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of
   service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer
   limitation bug."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278425" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281949" version="25">
      <metadata>
        <title>Test for openssl On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1377 at MITRE

Description

   The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of
   service (memory consumption) via a large series of "future epoch" DTLS records that are buffered in a queue, aka "DTLS record buffer
   limitation bug."
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1377" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1377" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278421" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281948" version="25">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1269 at MITRE

Description

   Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted
   Tektronix .rf5 file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1269" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281947" version="25">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1269 at MITRE

Description

   Unspecified vulnerability in Wireshark 0.99.6 through 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted
   Tektronix .rf5 file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1269" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1269" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281946" version="25">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1268 at MITRE

Description

   The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of
   service (crash) via a crafted FWHA_MY_STATE packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1268" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281945" version="25">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1268 at MITRE

Description

   The Check Point High-Availability Protocol (CPHAP) dissector in Wireshark 0.9.6 through 1.0.6 allows remote attackers to cause a denial of
   service (crash) via a crafted FWHA_MY_STATE packet.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1268" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1268" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281944" version="25">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1267 at MITRE

Description

   Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause
   a denial of service (crash) via unknown attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1267" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281943" version="25">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1267 at MITRE

Description

   Unspecified vulnerability in the LDAP dissector in Wireshark 0.99.2 through 1.0.6, when running on Windows, allows remote attackers to cause
   a denial of service (crash) via unknown attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1267" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1267" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281942" version="25">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1266 at MITRE

Description

   Unspecified vulnerability in Wireshark before 1.0.7-0.1-1 has unknown impact and attack vectors.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1266" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281941" version="25">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1266 at MITRE

Description

   Unspecified vulnerability in Wireshark before 1.0.7-0.1-1 has unknown impact and attack vectors.
     ________________________________________________________________________________________________________________________________________

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1266" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1266" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281940" version="25">
      <metadata>
        <title>Test for xntp-doc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1252 at MITRE

Description

   Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL
   and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280170" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281939" version="25">
      <metadata>
        <title>Test for xntp On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1252 at MITRE

Description

   Stack-based buffer overflow in the crypto_recv function in ntp_crypto.c in ntpd in NTP before 4.2.4p7 and 4.2.5 before 4.2.5p74, when OpenSSL
   and autokey are enabled, allows remote attackers to execute arbitrary code via a crafted packet containing an extension field.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1252" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1252" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280166" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281938" version="25">
      <metadata>
        <title>Test for ethereal-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1210 at MITRE

Description

   Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute
   arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third
   party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1210" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279036" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281937" version="25">
      <metadata>
        <title>Test for ethereal On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1210 at MITRE

Description

   Format string vulnerability in the PROFINET/DCP (PN-DCP) dissector in Wireshark 1.0.6 and earlier allows remote attackers to execute
   arbitrary code via a PN-DCP packet with format string specifiers in the station name. NOTE: some of these details are obtained from third
   party information.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1210" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1210" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:279032" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281936" version="26">
      <metadata>
        <title>Test for libgimpprint-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281875" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281935" version="26">
      <metadata>
        <title>Test for libgimpprint On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281871" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281934" version="26">
      <metadata>
        <title>Test for ghostscript-x11 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281867" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281933" version="26">
      <metadata>
        <title>Test for ghostscript-omni On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281932" version="26">
      <metadata>
        <title>Test for ghostscript-library On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281859" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281931" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-std On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281855" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281930" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-rus On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281851" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281929" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-other On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0792 at MITRE

Description

   Multiple integer overflows in icc.c in the International Color Consortium (ICC) Format library (aka icclib), as used in Ghostscript 8.64 and
   earlier and Argyll Color Management System (CMS) 1.0.3 and earlier, allow context-dependent attackers to cause a denial of service
   (heap-based buffer overflow and application crash) or possibly execute arbitrary code by using a device file for a translation request that
   operates on a crafted image file and targets a certain "native color space," related to an ICC profile in a (1) PostScript or (2) PDF file
   with embedded images. NOTE: this issue exists because of an incomplete fix for CVE-2009-0583.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0792" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0792" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281847" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281928" version="26">
      <metadata>
        <title>Test for cyrus-sasl-sqlauxprop On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281925" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281924" version="26">
      <metadata>
        <title>Test for cyrus-sasl-plain On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281921" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281920" version="26">
      <metadata>
        <title>Test for cyrus-sasl-otp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281917" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281916" version="26">
      <metadata>
        <title>Test for cyrus-sasl-gssapi On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281913" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281912" version="26">
      <metadata>
        <title>Test for cyrus-sasl-digestmd5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281909" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281908" version="26">
      <metadata>
        <title>Test for cyrus-sasl-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281905" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281904" version="26">
      <metadata>
        <title>Test for cyrus-sasl-crammd5 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281901" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281900" version="26">
      <metadata>
        <title>Test for cyrus-sasl On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0688 at MITRE

Description

   Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a
   denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0688" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0688" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281897" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281896" version="26">
      <metadata>
        <title>Test for libgimpprint-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281875" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281895" version="26">
      <metadata>
        <title>Test for libgimpprint On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281871" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281894" version="26">
      <metadata>
        <title>Test for ghostscript-x11 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281867" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281893" version="26">
      <metadata>
        <title>Test for ghostscript-omni On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281892" version="26">
      <metadata>
        <title>Test for ghostscript-library On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281859" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281891" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-std On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281855" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281890" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-rus On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281851" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281889" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-other On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0196 at MITRE

Description

   Heap-based buffer overflow in the big2_decode_symbol_dict function (jbig2_symbol_dict.c) in the JBIG2 decoding library (jbig2dec) in
   Ghostscript 8.64, and probably earlier versions, allows remote attackers to execute arbitrary code via a PDF file with a JBIG2 symbol
   dictionary segment with a large run length value.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0196" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0196" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281847" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281888" version="26">
      <metadata>
        <title>Test for xntp-doc On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0159 at MITRE

Description

   Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute
   arbitrary code via a crafted response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280170" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281887" version="26">
      <metadata>
        <title>Test for xntp On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2009-0159 at MITRE

Description

   Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute
   arbitrary code via a crafted response.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2009-0159" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0159" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:280166" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281886" version="26">
      <metadata>
        <title>Test for libgimpprint-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281875" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281885" version="26">
      <metadata>
        <title>Test for libgimpprint On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281871" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281884" version="26">
      <metadata>
        <title>Test for ghostscript-x11 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281867" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281883" version="26">
      <metadata>
        <title>Test for ghostscript-omni On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281882" version="26">
      <metadata>
        <title>Test for ghostscript-library On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281859" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281881" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-std On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281855" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281880" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-rus On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281851" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281879" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-other On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2008-6679 at MITRE

Description

   Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of
   service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2008-6679" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6679" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281847" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281878" version="26">
      <metadata>
        <title>Test for libgimpprint-devel On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281875" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281874" version="26">
      <metadata>
        <title>Test for libgimpprint On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281871" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281870" version="26">
      <metadata>
        <title>Test for ghostscript-x11 On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281867" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281866" version="26">
      <metadata>
        <title>Test for ghostscript-omni On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281863" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281862" version="26">
      <metadata>
        <title>Test for ghostscript-library On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281859" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281858" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-std On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281855" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281854" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-rus On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281851" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281850" version="26">
      <metadata>
        <title>Test for ghostscript-fonts-other On SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</title>
        <description>
   [293]CVE-2007-6725 at MITRE

Description

   The CCITTFax decoding filter in Ghostscript 8.60, 8.61, and possibly other versions, allows remote attackers to cause a denial of service
   (crash) and possibly execute arbitrary code via a crafted PDF file that triggers a buffer underflow in the cf_decode_2d function.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for AMD64 and Intel EM64T</platform>
        </affected>
        <reference ref_id="CVE-2007-6725" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6725" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:281847" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281846" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281845" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281844" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281843" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281842" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281841" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281840" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281839" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281838" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281837" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281836" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1439 at MITRE

Description

   Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a denial of service
   (crash) via a long nativeFileSystem field in a Tree Connect response to an SMB mount request.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.8 (AV:N/AC:L/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1439" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1439" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281835" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281834" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281833" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281832" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281831" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281830" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281829" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281828" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281827" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281826" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281825" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1337 at MITRE

Description

   The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability
   is held, which allows local users to send an arbitrary signal to a process by running a program that modifies the exit_signal field and then
   uses an exec system call to launch a setuid application.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.4 (AV:L/AC:M/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1337" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1337" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281824" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281823" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281822" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281821" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281820" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281819" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281818" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281817" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281816" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281815" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281814" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1265 at MITRE

Description

   Integer overflow in rose_sendmsg (sys/net/af_rose.c) in the Linux kernel 2.6.24.4, and other versions before 2.6.30-rc1, might allow remote
   attackers to obtain sensitive information via a large length value, which causes "garbage" memory to be sent.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1265" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1265" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281813" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281812" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281811" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281810" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281809" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281808" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281807" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281806" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281805" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for IBM zSeries 64bit</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281804" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281803" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-1072 at MITRE

Description

   nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows
   local users to create device nodes, as demonstrated on a filesystem that has been exported with the root_squash option.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.9 (AV:L/AC:L/Au:N/C:N/I:C/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-1072" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1072" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281802" version="26">
      <metadata>
        <title>Test for kernel-xenpae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278342" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281801" version="26">
      <metadata>
        <title>Test for kernel-xen On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278338" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281800" version="26">
      <metadata>
        <title>Test for kernel-vmipae On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278334" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281799" version="26">
      <metadata>
        <title>Test for kernel-vmi On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278330" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281798" version="26">
      <metadata>
        <title>Test for kernel-syms On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278326" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281797" version="26">
      <metadata>
        <title>Test for kernel-source On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278322" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281796" version="26">
      <metadata>
        <title>Test for kernel-smp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278318" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281795" version="26">
      <metadata>
        <title>Test for kernel-kdump On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278314" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281794" version="26">
      <metadata>
        <title>Test for kernel-default On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278310" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281793" version="26">
      <metadata>
        <title>Test for kernel-debug On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278306" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281792" version="26">
      <metadata>
        <title>Test for kernel-bigsmp On SUSE Linux Enterprise Server 10 SP2 for x86</title>
        <description>
   [293]CVE-2009-0859 at MITRE

Description

   The shm_get_stat function in ipc/shm.c in the shm subsystem in the Linux kernel before 2.6.28.5, when CONFIG_SHMEM is disabled, misinterprets
   the data type of an inode, which allows local users to cause a denial of service (system hang) via an SHM_INFO shmctl call, as demonstrated
   by running the ipcs program.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.7 (AV:L/AC:M/Au:N/C:N/I:N/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell SUSE Linux Enterprise Server 10 SP2 for x86</platform>
        </affected>
        <reference ref_id="CVE-2009-0859" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0859" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278302" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281791" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1107 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,
   allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog,
   related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1107" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281790" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1107 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,
   allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog,
   related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1107" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281789" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1107 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,
   allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog,
   related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1107" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281788" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1107 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,
   allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog,
   related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1107" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281787" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1107 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,
   allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog,
   related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1107" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281786" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1107 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier,
   allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog,
   related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 4.3 (AV:N/AC:M/Au:N/C:N/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1107" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1107" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281785" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1104 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and
   1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows
   user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged
   with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1104" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281784" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1104 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and
   1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows
   user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged
   with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1104" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281783" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1104 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and
   1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows
   user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged
   with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1104" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281782" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1104 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and
   1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows
   user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged
   with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1104" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281781" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1104 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and
   1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows
   user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged
   with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1104" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281780" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1104 at MITRE

Description

   The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and
   1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows
   user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged
   with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.8 (AV:N/AC:M/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1104" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1104" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281779" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1103 at MITRE

Description

   Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier;
   6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code
   via unknown vectors related to "deserializing applets," aka CR 6646860.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1103" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281778" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1103 at MITRE

Description

   Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier;
   6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code
   via unknown vectors related to "deserializing applets," aka CR 6646860.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1103" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281777" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1103 at MITRE

Description

   Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier;
   6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code
   via unknown vectors related to "deserializing applets," aka CR 6646860.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1103" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281776" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1103 at MITRE

Description

   Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier;
   6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code
   via unknown vectors related to "deserializing applets," aka CR 6646860.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1103" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281775" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1103 at MITRE

Description

   Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier;
   6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code
   via unknown vectors related to "deserializing applets," aka CR 6646860.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1103" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281774" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1103 at MITRE

Description

   Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier;
   6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code
   via unknown vectors related to "deserializing applets," aka CR 6646860.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 6.4 (AV:N/AC:L/Au:N/C:P/I:P/A:N)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1103" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1103" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281773" version="25">
      <metadata>
        <title>Test for java-1_4_2-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278156" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281772" version="25">
      <metadata>
        <title>Test for java-1_4_2-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278152" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281771" version="25">
      <metadata>
        <title>Test for java-1_4_2-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278148" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281770" version="25">
      <metadata>
        <title>Test for java-1_4_2-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278144" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281769" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281768" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281767" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281766" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281765" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281764" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1100 at MITRE

Description

   Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6
   Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and
   (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1100" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1100" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281763" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1099 at MITRE

Description

   Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and
   earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a
   signed comparison and triggers a buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1099" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281762" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1099 at MITRE

Description

   Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and
   earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a
   signed comparison and triggers a buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1099" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281761" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1099 at MITRE

Description

   Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and
   earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a
   signed comparison and triggers a buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1099" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281760" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1099 at MITRE

Description

   Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and
   earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a
   signed comparison and triggers a buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1099" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281759" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1099 at MITRE

Description

   Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and
   earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a
   signed comparison and triggers a buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1099" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281758" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1099 at MITRE

Description

   Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and
   earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a
   signed comparison and triggers a buffer overflow.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1099" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1099" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281757" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1098 at MITRE

Description

   Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier;
   1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka
   CR 6804998.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281756" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1098 at MITRE

Description

   Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier;
   1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka
   CR 6804998.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281755" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1098 at MITRE

Description

   Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier;
   1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka
   CR 6804998.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281754" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-devel On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1098 at MITRE

Description

   Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier;
   1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka
   CR 6804998.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278128" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281753" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-alsa On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1098 at MITRE

Description

   Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier;
   1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka
   CR 6804998.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278124" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281752" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1098 at MITRE

Description

   Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier;
   1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka
   CR 6804998.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1098" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1098" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278120" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281751" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-plugin On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1096 at MITRE

Description

   Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12
   and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278140" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281750" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-jdbc On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1096 at MITRE

Description

   Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12
   and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278136" />
        </criteria>
      </criteria>
    </definition>
    <definition class="patch" id="oval:com.mcafee.oval.gen:def:281749" version="25">
      <metadata>
        <title>Test for java-1_5_0-ibm-fonts On Suse Linux Enterprise server(x86 platform)</title>
        <description>
   [293]CVE-2009-1096 at MITRE

Description

   Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12
   and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.
     ________________________________________________________________________________________________________________________________________

   [294]NVD CVSS v2 Base Score: 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)

Novell/SUSE information

</description>
        <affected family="linux">
          <platform>Novell Suse Linux Enterprise Server 10</platform>
        </affected>
        <reference ref_id="CVE-2009-1096" ref_url="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1096" source="SUSE Advisory Releases" />
        <vendor_data vendor="SUSE" />
      </metadata>
      <criteria>
        <criteria comment="Suse Patch Criteria">
          <criterion negate="true" test_ref="oval:com.mcafee.oval.gen:tst:278132" />
        </criteria>
      </criteria>
    </definition>
  </definitions>
  <tests>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for opensc-32bit" id="oval:com.mcafee.oval.gen:tst:293567" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:293568" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:293569" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for audiofile-devel" id="oval:com.mcafee.oval.gen:tst:283010" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:283011" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:283012" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for audiofile" id="oval:com.mcafee.oval.gen:tst:283006" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:283007" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:283008" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xterm" id="oval:com.mcafee.oval.gen:tst:282999" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:283000" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:283001" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for netatalk-devel" id="oval:com.mcafee.oval.gen:tst:282995" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282996" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282997" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for netatalk" id="oval:com.mcafee.oval.gen:tst:282991" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282992" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282993" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt-python" id="oval:com.mcafee.oval.gen:tst:282938" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282939" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282940" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt-devel" id="oval:com.mcafee.oval.gen:tst:282934" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282935" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282936" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libvirt" id="oval:com.mcafee.oval.gen:tst:282930" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282931" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282932" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for opensc-devel" id="oval:com.mcafee.oval.gen:tst:282916" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282917" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282918" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for opensc" id="oval:com.mcafee.oval.gen:tst:282912" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282913" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282914" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for mod_jk-ap20" id="oval:com.mcafee.oval.gen:tst:282829" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282830" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282831" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for apache2-mod_jk" id="oval:com.mcafee.oval.gen:tst:282814" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282815" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282816" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for jakarta-tomcat" id="oval:com.mcafee.oval.gen:tst:282799" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282800" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282801" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-webapps" id="oval:com.mcafee.oval.gen:tst:282795" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282796" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282797" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-servlet-2_4-api-javadoc" id="oval:com.mcafee.oval.gen:tst:282791" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282792" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282793" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-servlet-2_4-api" id="oval:com.mcafee.oval.gen:tst:282787" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282788" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282789" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-server-lib" id="oval:com.mcafee.oval.gen:tst:282783" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282784" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282785" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-jsp-2_0-api-javadoc" id="oval:com.mcafee.oval.gen:tst:282779" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282780" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282781" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-jsp-2_0-api" id="oval:com.mcafee.oval.gen:tst:282775" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282776" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282777" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-jasper-javadoc" id="oval:com.mcafee.oval.gen:tst:282771" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282772" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282773" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-jasper" id="oval:com.mcafee.oval.gen:tst:282767" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282768" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282769" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-common-lib" id="oval:com.mcafee.oval.gen:tst:282763" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282764" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282765" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55-admin-webapps" id="oval:com.mcafee.oval.gen:tst:282759" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282760" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282761" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat55" id="oval:com.mcafee.oval.gen:tst:282755" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282756" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282757" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for pam_mount" id="oval:com.mcafee.oval.gen:tst:282734" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282735" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282736" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for compat-curl2" id="oval:com.mcafee.oval.gen:tst:282724" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282725" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282726" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for curl-devel" id="oval:com.mcafee.oval.gen:tst:282720" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282721" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282722" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for curl" id="oval:com.mcafee.oval.gen:tst:282716" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282717" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282718" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for liblcms-devel" id="oval:com.mcafee.oval.gen:tst:282675" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282676" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282677" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for liblcms" id="oval:com.mcafee.oval.gen:tst:282671" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282672" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282673" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for vim" id="oval:com.mcafee.oval.gen:tst:282667" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282668" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282669" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gvim" id="oval:com.mcafee.oval.gen:tst:282663" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282664" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282665" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsndfile-devel" id="oval:com.mcafee.oval.gen:tst:282593" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282594" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282595" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsndfile" id="oval:com.mcafee.oval.gen:tst:282589" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282590" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282591" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for multipath-tools" id="oval:com.mcafee.oval.gen:tst:282585" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282586" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282587" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for NetworkManager-kde" id="oval:com.mcafee.oval.gen:tst:282408" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282409" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282410" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for NetworkManager-glib" id="oval:com.mcafee.oval.gen:tst:282404" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282405" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282406" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for NetworkManager-devel" id="oval:com.mcafee.oval.gen:tst:282400" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282401" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282402" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for NetworkManager" id="oval:com.mcafee.oval.gen:tst:282396" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282397" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282398" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for NetworkManager-gnome" id="oval:com.mcafee.oval.gen:tst:282392" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282393" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282394" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gnutls-devel" id="oval:com.mcafee.oval.gen:tst:282388" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282389" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282390" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for gnutls" id="oval:com.mcafee.oval.gen:tst:282384" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282385" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282386" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for hal-gnome" id="oval:com.mcafee.oval.gen:tst:282380" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282381" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282382" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for hal-devel" id="oval:com.mcafee.oval.gen:tst:282376" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282377" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282378" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for hal" id="oval:com.mcafee.oval.gen:tst:282372" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282373" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282374" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-x11" id="oval:com.mcafee.oval.gen:tst:282368" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282369" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282370" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-qt3-devel" id="oval:com.mcafee.oval.gen:tst:282364" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282365" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282366" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-qt3" id="oval:com.mcafee.oval.gen:tst:282360" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282361" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282362" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-python" id="oval:com.mcafee.oval.gen:tst:282356" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282357" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282358" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-mono" id="oval:com.mcafee.oval.gen:tst:282352" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282353" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282354" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-java" id="oval:com.mcafee.oval.gen:tst:282348" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282349" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282350" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-gtk" id="oval:com.mcafee.oval.gen:tst:282344" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282345" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282346" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-glib" id="oval:com.mcafee.oval.gen:tst:282340" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282341" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282342" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1-devel" id="oval:com.mcafee.oval.gen:tst:282336" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282337" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282338" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dbus-1" id="oval:com.mcafee.oval.gen:tst:282332" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282333" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282334" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for freetype2-devel" id="oval:com.mcafee.oval.gen:tst:282322" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282323" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282324" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for freetype2" id="oval:com.mcafee.oval.gen:tst:282318" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282319" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282320" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsoup-devel" id="oval:com.mcafee.oval.gen:tst:282304" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282305" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282306" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libsoup" id="oval:com.mcafee.oval.gen:tst:282300" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:282301" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:282302" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl-sqlauxprop" id="oval:com.mcafee.oval.gen:tst:281925" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281926" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281927" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl-plain" id="oval:com.mcafee.oval.gen:tst:281921" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281922" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281923" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl-otp" id="oval:com.mcafee.oval.gen:tst:281917" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281918" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281919" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl-gssapi" id="oval:com.mcafee.oval.gen:tst:281913" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281914" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281915" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl-digestmd5" id="oval:com.mcafee.oval.gen:tst:281909" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281910" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281911" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl-devel" id="oval:com.mcafee.oval.gen:tst:281905" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281906" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281907" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl-crammd5" id="oval:com.mcafee.oval.gen:tst:281901" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281902" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281903" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cyrus-sasl" id="oval:com.mcafee.oval.gen:tst:281897" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281898" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281899" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libgimpprint-devel" id="oval:com.mcafee.oval.gen:tst:281875" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281876" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281877" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libgimpprint" id="oval:com.mcafee.oval.gen:tst:281871" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281872" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281873" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ghostscript-x11" id="oval:com.mcafee.oval.gen:tst:281867" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281868" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281869" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ghostscript-omni" id="oval:com.mcafee.oval.gen:tst:281863" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281864" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281865" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ghostscript-library" id="oval:com.mcafee.oval.gen:tst:281859" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281860" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281861" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ghostscript-fonts-std" id="oval:com.mcafee.oval.gen:tst:281855" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281856" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281857" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ghostscript-fonts-rus" id="oval:com.mcafee.oval.gen:tst:281851" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281852" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281853" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ghostscript-fonts-other" id="oval:com.mcafee.oval.gen:tst:281847" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281848" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281849" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dhcp-server" id="oval:com.mcafee.oval.gen:tst:281415" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281416" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281417" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dhcp-relay" id="oval:com.mcafee.oval.gen:tst:281411" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281412" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281413" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dhcp-devel" id="oval:com.mcafee.oval.gen:tst:281407" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281408" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281409" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dhcp-client" id="oval:com.mcafee.oval.gen:tst:281403" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281404" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281405" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for dhcp" id="oval:com.mcafee.oval.gen:tst:281399" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281400" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281401" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for websphere-as_ce" id="oval:com.mcafee.oval.gen:tst:281319" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:281320" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:281321" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-plugin" id="oval:com.mcafee.oval.gen:tst:280741" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280742" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280743" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-jdbc" id="oval:com.mcafee.oval.gen:tst:280737" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280738" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280739" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-devel" id="oval:com.mcafee.oval.gen:tst:280733" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280734" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280735" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun-alsa" id="oval:com.mcafee.oval.gen:tst:280729" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280730" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280731" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-sun" id="oval:com.mcafee.oval.gen:tst:280725" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280726" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280727" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openswan" id="oval:com.mcafee.oval.gen:tst:280625" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280626" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280627" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for strongswan-doc" id="oval:com.mcafee.oval.gen:tst:280621" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280622" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280623" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for strongswan" id="oval:com.mcafee.oval.gen:tst:280617" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280618" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280619" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xntp-doc" id="oval:com.mcafee.oval.gen:tst:280170" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280171" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280172" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for xntp" id="oval:com.mcafee.oval.gen:tst:280166" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280167" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280168" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups-libs" id="oval:com.mcafee.oval.gen:tst:280144" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280145" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280146" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups-devel" id="oval:com.mcafee.oval.gen:tst:280140" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280141" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280142" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups-client" id="oval:com.mcafee.oval.gen:tst:280136" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280137" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280138" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for cups" id="oval:com.mcafee.oval.gen:tst:280132" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280133" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280134" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for postgresql-server" id="oval:com.mcafee.oval.gen:tst:280004" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:280005" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:280006" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for postgresql-libs" id="oval:com.mcafee.oval.gen:tst:279996" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279997" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279998" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for postgresql-docs" id="oval:com.mcafee.oval.gen:tst:279992" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279993" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279994" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for postgresql-devel" id="oval:com.mcafee.oval.gen:tst:279988" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279989" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279990" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for postgresql-contrib" id="oval:com.mcafee.oval.gen:tst:279984" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279985" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279986" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for postgresql" id="oval:com.mcafee.oval.gen:tst:279980" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279981" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279982" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-server" id="oval:com.mcafee.oval.gen:tst:279976" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279977" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279978" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-devel" id="oval:com.mcafee.oval.gen:tst:279972" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279973" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279974" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-client" id="oval:com.mcafee.oval.gen:tst:279968" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279969" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279970" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-apps-servers" id="oval:com.mcafee.oval.gen:tst:279964" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279965" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279966" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5-apps-clients" id="oval:com.mcafee.oval.gen:tst:279960" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279961" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279962" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for krb5" id="oval:com.mcafee.oval.gen:tst:279956" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279957" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279958" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for perl-SNMP" id="oval:com.mcafee.oval.gen:tst:279948" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279949" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279950" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for net-snmp-devel" id="oval:com.mcafee.oval.gen:tst:279944" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279945" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279946" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for net-snmp" id="oval:com.mcafee.oval.gen:tst:279940" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279941" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279942" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-zlib" id="oval:com.mcafee.oval.gen:tst:279364" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279365" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279366" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-xsl" id="oval:com.mcafee.oval.gen:tst:279360" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279361" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279362" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-xmlrpc" id="oval:com.mcafee.oval.gen:tst:279356" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279357" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279358" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-xmlreader" id="oval:com.mcafee.oval.gen:tst:279352" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279353" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279354" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-wddx" id="oval:com.mcafee.oval.gen:tst:279348" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279349" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279350" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-tokenizer" id="oval:com.mcafee.oval.gen:tst:279344" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279345" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279346" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sysvshm" id="oval:com.mcafee.oval.gen:tst:279340" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279341" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279342" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sysvsem" id="oval:com.mcafee.oval.gen:tst:279336" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279337" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279338" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sysvmsg" id="oval:com.mcafee.oval.gen:tst:279332" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279333" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279334" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-suhosin" id="oval:com.mcafee.oval.gen:tst:279328" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279329" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279330" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sqlite" id="oval:com.mcafee.oval.gen:tst:279324" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279325" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279326" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-sockets" id="oval:com.mcafee.oval.gen:tst:279320" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279321" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279322" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-soap" id="oval:com.mcafee.oval.gen:tst:279316" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279317" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279318" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-snmp" id="oval:com.mcafee.oval.gen:tst:279312" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279313" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279314" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-shmop" id="oval:com.mcafee.oval.gen:tst:279308" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279309" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279310" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pspell" id="oval:com.mcafee.oval.gen:tst:279304" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279305" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279306" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-posix" id="oval:com.mcafee.oval.gen:tst:279300" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279301" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279302" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pgsql" id="oval:com.mcafee.oval.gen:tst:279296" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279297" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279298" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pear" id="oval:com.mcafee.oval.gen:tst:279292" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279293" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279294" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pdo" id="oval:com.mcafee.oval.gen:tst:279288" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279289" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279290" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-pcntl" id="oval:com.mcafee.oval.gen:tst:279284" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279285" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279286" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-openssl" id="oval:com.mcafee.oval.gen:tst:279280" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279281" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279282" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-odbc" id="oval:com.mcafee.oval.gen:tst:279276" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279277" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279278" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ncurses" id="oval:com.mcafee.oval.gen:tst:279272" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279273" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279274" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mysql" id="oval:com.mcafee.oval.gen:tst:279268" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279269" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279270" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mhash" id="oval:com.mcafee.oval.gen:tst:279264" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279265" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279266" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mcrypt" id="oval:com.mcafee.oval.gen:tst:279260" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279261" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279262" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-mbstring" id="oval:com.mcafee.oval.gen:tst:279256" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279257" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279258" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ldap" id="oval:com.mcafee.oval.gen:tst:279252" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279253" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279254" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-json" id="oval:com.mcafee.oval.gen:tst:279248" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279249" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279250" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-imap" id="oval:com.mcafee.oval.gen:tst:279244" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279245" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279246" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-iconv" id="oval:com.mcafee.oval.gen:tst:279240" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279241" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279242" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-gmp" id="oval:com.mcafee.oval.gen:tst:279236" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279237" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279238" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-gettext" id="oval:com.mcafee.oval.gen:tst:279232" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279233" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279234" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-gd" id="oval:com.mcafee.oval.gen:tst:279228" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279229" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279230" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ftp" id="oval:com.mcafee.oval.gen:tst:279224" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279225" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279226" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-fastcgi" id="oval:com.mcafee.oval.gen:tst:279220" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279221" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279222" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-exif" id="oval:com.mcafee.oval.gen:tst:279216" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279217" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279218" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dom" id="oval:com.mcafee.oval.gen:tst:279212" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279213" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279214" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-devel" id="oval:com.mcafee.oval.gen:tst:279208" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279209" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279210" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dbase" id="oval:com.mcafee.oval.gen:tst:279204" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279205" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279206" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-dba" id="oval:com.mcafee.oval.gen:tst:279200" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279201" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279202" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-curl" id="oval:com.mcafee.oval.gen:tst:279196" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279197" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279198" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-ctype" id="oval:com.mcafee.oval.gen:tst:279192" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279193" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279194" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-calendar" id="oval:com.mcafee.oval.gen:tst:279188" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279189" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279190" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-bz2" id="oval:com.mcafee.oval.gen:tst:279184" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279185" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279186" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5-bcmath" id="oval:com.mcafee.oval.gen:tst:279180" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279181" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279182" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for php5" id="oval:com.mcafee.oval.gen:tst:279176" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279177" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279178" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for apache2-mod_php5" id="oval:com.mcafee.oval.gen:tst:279172" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279173" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279174" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ethereal-devel" id="oval:com.mcafee.oval.gen:tst:279036" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279037" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279038" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for ethereal" id="oval:com.mcafee.oval.gen:tst:279032" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:279033" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:279034" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat5-webapps" id="oval:com.mcafee.oval.gen:tst:278995" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278996" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278997" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat5-admin-webapps" id="oval:com.mcafee.oval.gen:tst:278991" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278992" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278993" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for tomcat5" id="oval:com.mcafee.oval.gen:tst:278987" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278988" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278989" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libmikmod" id="oval:com.mcafee.oval.gen:tst:278863" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278864" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278865" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for evolution-data-server-devel" id="oval:com.mcafee.oval.gen:tst:278841" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278842" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278843" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for evolution-data-server" id="oval:com.mcafee.oval.gen:tst:278837" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278838" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278839" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpng-devel" id="oval:com.mcafee.oval.gen:tst:278801" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278802" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278803" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for libpng" id="oval:com.mcafee.oval.gen:tst:278797" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278798" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278799" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for compat-openssl097g" id="oval:com.mcafee.oval.gen:tst:278461" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278462" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278463" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-doc" id="oval:com.mcafee.oval.gen:tst:278429" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278430" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278431" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl-devel" id="oval:com.mcafee.oval.gen:tst:278425" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278426" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278427" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for openssl" id="oval:com.mcafee.oval.gen:tst:278421" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278422" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278423" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-xenpae" id="oval:com.mcafee.oval.gen:tst:278342" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278343" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278344" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-xen" id="oval:com.mcafee.oval.gen:tst:278338" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278339" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278340" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-vmipae" id="oval:com.mcafee.oval.gen:tst:278334" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278335" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278336" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-vmi" id="oval:com.mcafee.oval.gen:tst:278330" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278331" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278332" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-syms" id="oval:com.mcafee.oval.gen:tst:278326" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278327" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278328" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-source" id="oval:com.mcafee.oval.gen:tst:278322" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278323" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278324" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-smp" id="oval:com.mcafee.oval.gen:tst:278318" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278319" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278320" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-kdump" id="oval:com.mcafee.oval.gen:tst:278314" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278315" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278316" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-default" id="oval:com.mcafee.oval.gen:tst:278310" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278311" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278312" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-debug" id="oval:com.mcafee.oval.gen:tst:278306" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278307" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278308" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for kernel-bigsmp" id="oval:com.mcafee.oval.gen:tst:278302" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278303" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278304" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for MozillaFirefox-translations" id="oval:com.mcafee.oval.gen:tst:278168" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278169" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278170" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for MozillaFirefox" id="oval:com.mcafee.oval.gen:tst:278160" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278161" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278162" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm-plugin" id="oval:com.mcafee.oval.gen:tst:278156" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278157" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278158" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm-jdbc" id="oval:com.mcafee.oval.gen:tst:278152" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278153" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278154" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm-devel" id="oval:com.mcafee.oval.gen:tst:278148" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278149" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278150" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_4_2-ibm" id="oval:com.mcafee.oval.gen:tst:278144" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278145" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278146" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-plugin" id="oval:com.mcafee.oval.gen:tst:278140" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278141" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278142" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-jdbc" id="oval:com.mcafee.oval.gen:tst:278136" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278137" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278138" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-fonts" id="oval:com.mcafee.oval.gen:tst:278132" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278133" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278134" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-devel" id="oval:com.mcafee.oval.gen:tst:278128" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278129" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278130" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm-alsa" id="oval:com.mcafee.oval.gen:tst:278124" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278125" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278126" />
    </rpminfo_test>
    <rpminfo_test check="all" check_existence="any_exist" comment="patch test for java-1_5_0-ibm" id="oval:com.mcafee.oval.gen:tst:278120" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <object object_ref="oval:com.mcafee.oval.gen:obj:278121" />
      <state state_ref="oval:com.mcafee.oval.gen:ste:278122" />
    </rpminfo_test>
  </tests>
  <objects>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:293568" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>opensc-32bit</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:283011" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>audiofile-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:283007" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>audiofile</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:283000" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xterm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282996" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netatalk-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282992" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>netatalk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282939" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282935" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282931" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libvirt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282917" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>opensc-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282913" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>opensc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282830" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>mod_jk-ap20</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282815" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apache2-mod_jk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282800" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>jakarta-tomcat</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282796" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282792" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-servlet-2_4-api-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282788" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-servlet-2_4-api</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282784" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-server-lib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282780" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-jsp-2_0-api-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282776" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-jsp-2_0-api</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282772" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-jasper-javadoc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282768" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-jasper</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282764" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-common-lib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282760" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55-admin-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282756" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat55</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282735" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>pam_mount</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282725" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>compat-curl2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282721" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>curl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282717" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>curl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282676" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>liblcms-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282672" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>liblcms</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282668" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>vim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282664" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gvim</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282594" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsndfile-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282590" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsndfile</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282586" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>multipath-tools</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282409" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-kde</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282405" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-glib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282401" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282397" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282393" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>NetworkManager-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282389" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnutls-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282385" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>gnutls</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282381" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hal-gnome</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282377" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hal-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282373" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>hal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282369" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-x11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282365" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-qt3-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282361" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-qt3</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282357" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-python</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282353" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-mono</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282349" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-java</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282345" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-gtk</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282341" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-glib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282337" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282333" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dbus-1</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282323" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freetype2-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282319" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>freetype2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282305" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsoup-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:282301" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libsoup</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281926" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-sqlauxprop</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281922" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-plain</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281918" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-otp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281914" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-gssapi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281910" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-digestmd5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281906" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281902" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl-crammd5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281898" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cyrus-sasl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281876" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgimpprint-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281872" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libgimpprint</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281868" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-x11</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281864" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-omni</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281860" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-library</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281856" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-fonts-std</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281852" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-fonts-rus</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281848" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ghostscript-fonts-other</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281416" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhcp-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281412" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhcp-relay</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281408" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhcp-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281404" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhcp-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281400" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>dhcp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:281320" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>websphere-as_ce</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280742" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280738" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280734" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280730" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280726" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-sun</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280626" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openswan</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280622" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>strongswan-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280618" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>strongswan</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280171" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xntp-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280167" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>xntp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280145" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280141" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280137" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280133" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>cups</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:280005" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279997" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-libs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279993" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-docs</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279989" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279985" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql-contrib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279981" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>postgresql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279977" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279973" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279969" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-client</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279965" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-apps-servers</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279961" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5-apps-clients</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279957" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>krb5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279949" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>perl-SNMP</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279945" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279941" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>net-snmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279365" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-zlib</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279361" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-xsl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279357" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-xmlrpc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279353" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-xmlreader</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279349" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-wddx</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279345" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-tokenizer</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279341" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sysvshm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279337" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sysvsem</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279333" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sysvmsg</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279329" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-suhosin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279325" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sqlite</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279321" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-sockets</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279317" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-soap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279313" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-snmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279309" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-shmop</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279305" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pspell</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279301" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-posix</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279297" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pgsql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279293" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pear</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279289" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pdo</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279285" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-pcntl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279281" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279277" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-odbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279273" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ncurses</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279269" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mysql</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279265" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mhash</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279261" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mcrypt</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279257" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-mbstring</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279253" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ldap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279249" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-json</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279245" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-imap</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279241" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-iconv</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279237" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-gmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279233" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-gettext</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279229" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-gd</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279225" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ftp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279221" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-fastcgi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279217" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-exif</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279213" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dom</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279209" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279205" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dbase</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279201" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-dba</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279197" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-curl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279193" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-ctype</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279189" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-calendar</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279185" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-bz2</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279181" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5-bcmath</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279177" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>php5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279173" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>apache2-mod_php5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279037" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:279033" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>ethereal</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278996" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278992" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5-admin-webapps</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278988" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>tomcat5</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278864" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libmikmod</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278842" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278838" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>evolution-data-server</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278802" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278798" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>libpng</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278462" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>compat-openssl097g</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278430" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-doc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278426" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278422" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>openssl</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278343" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xenpae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278339" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-xen</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278335" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-vmipae</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278331" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-vmi</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278327" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-syms</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278323" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-source</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278319" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-smp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278315" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-kdump</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278311" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-default</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278307" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-debug</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278303" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>kernel-bigsmp</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278169" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>MozillaFirefox-translations</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278161" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>MozillaFirefox</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278157" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278153" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278149" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278145" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_4_2-ibm</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278141" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-plugin</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278137" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-jdbc</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278133" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-fonts</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278129" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-devel</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278125" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm-alsa</name>
    </rpminfo_object>
    <rpminfo_object id="oval:com.mcafee.oval.gen:obj:278121" version="3" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <name>java-1_5_0-ibm</name>
    </rpminfo_object>
  </objects>
  <states>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:293569" version="1" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.6-17.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:283012" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">0.2.6</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:283008" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">0.2.6</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:283001" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:208-14.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282997" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.0.3-21.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282993" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.0.3-21.8</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282940" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.3.3-18.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282936" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.3.3-18.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282932" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.3.3-18.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282918" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.6-17.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282914" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.6-17.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282831" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.1.30-0.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282816" version="17" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.21-59.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282801" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.0.4-438</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282797" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282793" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282789" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282785" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282781" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282777" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282773" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282769" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282765" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282761" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282757" version="28" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.5.23-113.7</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282736" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.18-29.20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282726" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:7.11.0-20.6</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282722" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:7.15.1-19.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282718" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:7.15.1-19.11</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282677" version="12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.15-12.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282673" version="12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.15-12.9</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282669" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:6.4.6-19.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282665" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:6.4.6-19.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282595" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.0.12-13.10</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282591" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.0.17-172.14.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282587" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.4.7-34.43</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282410" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.1r588481-1.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282406" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.7.0.r4359-15.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282402" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.6.6-0.14</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282398" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.7.0.r4359-15.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282394" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.7.0.r1053-11.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282390" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.10-13.15</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282386" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.4.1-24.19.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282382" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.5.6-33.41</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282378" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.5.6-33.41</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282374" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.5.6-33.41</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282370" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282366" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282362" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282358" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282354" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282350" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282346" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.25</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282342" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.22</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282338" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.60-33.22</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282334" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.10-3.9.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282324" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.10-18.20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282320" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.10-18.20</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282306" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.90-18.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:282302" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.2.90-18.24</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281927" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.21-18.10.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281923" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.22-182.20.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281919" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.22-182.20.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281915" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.22-182.20.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281911" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.22-182.20.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281907" version="4" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.21-18.10.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281903" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.22-182.20.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281899" version="5" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.22-182.20.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281877" version="24" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.2.7-62.18</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281873" version="25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.2.7-32.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281869" version="25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.62-32.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281865" version="25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.62-32.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281861" version="25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.62-32.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281857" version="25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.62-32.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281853" version="25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.62-32.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281849" version="25" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.62-32.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281417" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.3-23.52</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281413" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.3-23.52</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281409" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.3-23.52</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281405" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.1.1-7.13.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281401" version="8" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.0.3-23.52</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:281321" version="89" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.1.1.2-2.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280743" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280739" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280735" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280731" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280727" version="100" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2.19-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280627" version="13" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16-1.34.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280623" version="21" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.1.10-0.16.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280619" version="21" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.1.10-0.16.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280172" version="17" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.2.4p3-48.15.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280168" version="17" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:4.2.4p3-48.15.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280146" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280142" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280138" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280134" version="71" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.1.23</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:280006" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.1.19-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279998" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.1.19-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279994" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.1.19-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279990" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.1.19-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279986" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.1.19-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279982" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:8.1.19-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279978" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.3-19.43.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279974" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.3-19.44.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279970" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.3-19.43.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279966" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.3-19.43.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279962" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.3-19.43.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279958" version="22" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.3-19.43.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279950" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.3.0.1-25.31</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279946" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.3.0.1-25.31</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279942" version="11" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.3.0.1-25.31</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279366" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279362" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279358" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279354" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279350" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279346" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279342" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279338" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279334" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279330" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279326" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279322" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279318" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279314" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279310" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279306" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279302" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279298" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279294" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279290" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279286" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279282" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279278" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279274" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279270" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279266" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279262" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279258" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279254" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279250" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279246" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279242" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279238" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279234" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279230" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279226" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279222" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279218" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279214" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279210" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279206" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279202" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279198" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279194" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279190" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279186" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279182" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279178" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279174" version="78" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.2.5-9.25.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279038" version="81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.10.14-16.41.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:279034" version="81" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.10.14-16.41.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278997" version="74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.30-27.45</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278993" version="74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.30-27.45</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278989" version="74" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:5.0.30-27.45</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278865" version="18" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:3.1.11-14.10.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278843" version="9" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.6.0-43.92.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278839" version="12" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.6.0</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278803" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.8-19.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278799" version="10" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.2.8-19.28.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278463" version="19" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.7g-13.19.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278431" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278427" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278423" version="44" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:0.9.8a-18.42.2</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278344" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278340" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278336" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278332" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278328" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278324" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278320" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278316" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278312" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278308" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278304" version="247" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:2.6.16.60-0.59.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278170" version="384" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">3.5.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278162" version="384" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">3.5.8</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278158" version="152" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.4.2_sr13.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278154" version="158" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.4.2_sr13.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278150" version="157" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.4.2_sr13.1-0.3</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278146" version="158" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.4.2_sr13.3</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278142" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278138" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278134" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278130" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278126" version="324" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <evr datatype="evr_string" operation="greater than or equal">0:1.5.0_sr11.2-0.4.1</evr>
    </rpminfo_state>
    <rpminfo_state id="oval:com.mcafee.oval.gen:ste:278122" version="325" xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux">
      <version datatype="version" operation="greater than or equal">1.5.0_sr11.2</version>
    </rpminfo_state>
  </states>
</oval_definitions>
