Debian: Security Advisory (DSA-1519-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1519-1] New horde3 packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1519-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 15, 2008 http://www.debian.org/security/faq -...

Debian DSA-1519-1 : horde3 - insufficient input sanitising

It was discovered that the Horde web application framework permits arbitrary file inclusion by a remote attacker through the theme preference parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

DSA-1519-1 horde3 - information disclosure

Bulletin has no description...

CVE-2008-1325

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1324...

CVE-2008-1324: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1325...

CVE-2008-1325: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 pageid and 2 language parameters. NOTE: this might be the same issue as CVE-2008-1324...

Fedora 8 : horde-3.1.7-1.fc8 (2008-2362)

Fix arbitrary file inclusion through abuse of the theme preference. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 7 : horde-3.1.7-1.fc7 (2008-2406)

Fix arbitrary file inclusion through abuse of the theme preference. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

horde316-inclusion.txt

Horde 3.1.6 arbitrary file inclusion vulnerability, proof of concept & patch. A severe security vulnerability affects any unix distribution running version 3.1.6 of the Horde webmail client included in most popular webhosting control panels. All previous versions are also affected and it is...

CVE-2008-1042: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

CVE-2008-0819: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in PlutoStatus Locator 1.0 pre alpha allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-0794: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-0654: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the VIEW view parameter to 1 index.php, 2 html/sitio/index.php, or 3 src/sistema/vistas/template/tplinicio.php...

CVE-2008-0478: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in SetCMS 3.6.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the set parameter, as demonstrated by sending a certain CLIENTIP HTTP header in an enter action to index.php, and injecting PHP sequences into...

CVE-2008-0459: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in update/index.php in Liquid-Silver CMS 0.35, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the update parameter...

CVE-2008-0393: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabla parameter, a different vector than CVE-2008-0361...

CVE-2008-0361: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in agregarinfo.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the tabla parameter...

Debian Security Advisory DSA 897-1 (phpsysinfo)

The remote host is missing an update to phpsysinfo announced via advisory DSA 897-1. Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-0870 Maksymilian...

Debian Security Advisory DSA 899-1 (egroupware)

The remote host is missing an update to egroupware announced via advisory DSA 899-1. Several vulnerabilities have been discovered in egroupware, a web-based groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-0870 Maksymilian Arciemowicz...