Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

[SECURITY] [DSA 4773-1] yaws security update

🗓️ 16 Oct 2020 21:55:11Reported by DebianType 
debian
 debian🔗 lists.debian.org👁 33 Views

Yaws update fixes WebDAV XXE and CGI command execution vulnerabilitie

Related
Packages
ReporterTitlePublishedViews
Family
ArchLinux		[ASA-202009-14] yaws: multiple issues
26 Sep 202000:00
–archlinux
BDU FSTEC		The vulnerability of the Yaws CGI web server lies in the lack of measures to neutralize special elements, which allows attackers to access confidential data, compromise its integrity, and cause service failures.
30 Mar 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Yaws WebDAV server implementation lies in the improper restriction of XML links to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
30 Mar 202100:00
–bdu_fstec
GithubExploit		Exploit for OS Command Injection in Yaws
6 Aug 202009:01
–githubexploit
Check Point Advisories		Arbitrary Code Execution Over HTTP Traffic (CVE-2011-2523; CVE-2019-18345; CVE-2019-19143; CVE-2020-15492; CVE-2020-16210; CVE-2020-21526; CVE-2020-24379; CVE-2020-6142; CVE-2020-8010; CVE-2020-9380)
18 Nov 202000:00
–checkpoint_advisories
Check Point Advisories		HTTP Authenticated OS Command Injection (CVE-2020-17408; CVE-2020-24916; CVE-2020-25079; CVE-2020-3117; CVE-2020-7049)
17 Dec 202000:00
–checkpoint_advisories
CVE		CVE-2020-24379
9 Sep 202018:10
–cve
CVE		CVE-2020-24916
9 Sep 202018:10
–cve
Cvelist		CVE-2020-24379
9 Sep 202018:10
–cvelist
Cvelist		CVE-2020-24916
9 Sep 202018:10
–cvelist
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian9allyaws-chat2.0.4+dfsg-1+deb9u1yaws-chat_2.0.4+dfsg-1+deb9u1_all.deb
Debian10allyaws-chat2.0.6+dfsg-1+deb10u1yaws-chat_2.0.6+dfsg-1+deb10u1_all.deb
Debian10arm64erlang-yapp2.0.6+dfsg-1+deb10u1erlang-yapp_2.0.6+dfsg-1+deb10u1_arm64.deb
Debian10allyaws-mail2.0.6+dfsg-1+deb10u1yaws-mail_2.0.6+dfsg-1+deb10u1_all.deb
Debian10ppc64elerlang-yapp2.0.6+dfsg-1+deb10u1erlang-yapp_2.0.6+dfsg-1+deb10u1_ppc64el.deb
Debian10allyaws-wiki2.0.6+dfsg-1+deb10u1yaws-wiki_2.0.6+dfsg-1+deb10u1_all.deb
Debian10allyaws-doc2.0.6+dfsg-1+deb10u1yaws-doc_2.0.6+dfsg-1+deb10u1_all.deb
Debian10armelerlang-yaws2.0.6+dfsg-1+deb10u1erlang-yaws_2.0.6+dfsg-1+deb10u1_armel.deb
Debian9allyaws-mail2.0.4+dfsg-1+deb9u1yaws-mail_2.0.4+dfsg-1+deb9u1_all.deb
Debian10armelerlang-yaws-dbgsym2.0.6+dfsg-1+deb10u1erlang-yaws-dbgsym_2.0.6+dfsg-1+deb10u1_armel.deb
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Oct 2020 21:55Current
1.7Low risk
Vulners AI Score1.7
EPSS0.17374
yawsupdatewebdavxxecgivulnerabilitiesdebiansecurity
33