phpsysinfo - programming errors

Several vulnerabilities have been discovered in phpsysinfo, a PHP
based host information application. The Common Vulnerabilities and
Exposures project identifies the following problems:

• CVE-2005-0870
  Maksymilian Arciemowicz discovered several cross site scripting
  problems, of which not all were fixed in DSA 724.
• CVE-2005-3347
  Christopher Kunz discovered that local variables get overwritten
  unconditionally and are trusted later, which could lead to the
  inclusion of arbitrary files.
• CVE-2005-3348
  Christopher Kunz discovered that user-supplied input is used
  unsanitised, causing a HTTP Response splitting problem.

For the old stable distribution (woody) these problems have been fixed in
version 2.0-3woody3.

For the stable distribution (sarge) these problems have been fixed in
version 2.3-4sarge1.

For the unstable distribution (sid) these problems will be fixed soon.

We recommend that you upgrade your phpsysinfo package.