This script is Copyright (C) 2007-2012 Tenable Network Security, Inc.
The remote SuSE 10 host is missing a security-related patch.
This update fixes a security bug in yast2-core that allowed local
attackers to provide malicious yast2 modules to yast2 that are
executed with root privileges. To trigger this vulnerability root has
to execute yast2 in an untrusted directory (i.e. /tmp). Thanks to
Stefan Nordhausen for reporting this to us.
Apply ZYPP patch number 4623.
Risk factor :
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now