Lucene search
GoogleOSV:DLA-31-1HistoryAug 07, 2014 - 12:00 a.m.
reportbug - security update
2014-08-0700:00:00
Google
osv.dev
2
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.027 Low
EPSS
Percentile
89.0%
Fix CVE-2014-0479: Arbitrary code execution in compare_versions.
A man-in-the-middle attacker could put shell metacharacters in the
version number, causing execution of code of their choice.
For Debian 6 Squeeze, these issues have been fixed in reportbug version 4.12.6+deb6u1
References
Related
debian
debian
[SECURITY] [DSA 2997-1] reportbug security update
2014-08-05 18:08:57
[DLA 31-1] reportbug security update
2014-08-07 17:03:09
[SECURITY] [DSA 2997-1] reportbug security update
2014-08-05 18:08:38
openvas
openvas
Debian Security Advisory DSA 2997-1 (reportbug - security update)
2014-08-05 00:00:00
Debian: Security Advisory (DLA-31-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-2997-1)
2014-08-04 00:00:00
nessus
nessus
Debian DSA-2997-1 : reportbug - security update
2014-08-06 00:00:00
Debian DLA-31-1 : reportbug security update
2015-03-26 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2997-1] reportbug security update
2014-08-26 00:00:00
cvelist
cvelist
CVE-2014-0479
2014-08-06 19:00:00
ubuntucve
ubuntucve
CVE-2014-0479
2014-08-06 00:00:00
prion
prion
Design/Logic Flaw
2014-08-06 19:55:00
osv
osv
reportbug - security update
2014-08-05 00:00:00
debiancve
debiancve
CVE-2014-0479
2014-08-06 19:55:00
cve
cve
CVE-2014-0479
2014-08-06 19:55:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.027 Low
EPSS
Percentile
89.0%
Related for OSV:DLA-31-1