Debian DSA-2539-1 : zabbix - SQL injection

It was discovered that Zabbix, a network monitoring solution, does not properly validate user input used as a part of a SQL query. This may allow unauthenticated attackers to execute arbitrary SQL commands SQL injection and possibly escalate privileges. %NASLMINLEVEL 70300 C Tenable Network...

Debian: Security Advisory (DSA-2537-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2538-1 : moin - privilege escalation

It was discovered that Moin, a Python clone of WikiWiki, incorrectly evaluates ACLs when virtual groups are involved. This may allow certain users to have additional permissions privilege escalation or lack expected permissions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Debian DSA-2536-1 : otrs2 - XSS

It was discovered that Open Ticket Request System OTRS, a ticket request system, contains a cross-site scripting vulnerability when email messages are viewed using Internet Explorer. This update also improves the HTML security filter to detect tag nesting. %NASLMINLEVEL 70300 C Tenable Network...

Debian DSA-2537-1 : typo3-src - several vulnerabilities

Several vulnerabilities were discovered in TYPO3, a content management system. - CVE-2012-3527 An insecure call to unserialize in the help system enables arbitrary code execution by authenticated users. - CVE-2012-3528 The TYPO3 backend contains several cross-site scripting vulnerabilities. -...

Debian Security Advisory DSA 2530-1 (rssh)

The remote host is missing an update to rssh announced via advisory DSA 2530-1. OpenVAS Vulnerability Test $Id: deb25301.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2530-1 rssh Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2526-1 (libotr)

The remote host is missing an update to libotr announced via advisory DSA 2526-1. OpenVAS Vulnerability Test $Id: deb25261.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2526-1 libotr Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2528-1 (icedove)

The remote host is missing an update to icedove announced via advisory DSA 2528-1. OpenVAS Vulnerability Test $Id: deb25281.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2528-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian Security Advisory DSA 2533-1 (pcp)

The remote host is missing an update to pcp announced via advisory DSA 2533-1. OpenVAS Vulnerability Test $Id: deb25331.nasl 7585 2017-10-26 15:03:01Z cfischer $ Description: Auto-generated from advisory DSA 2533-1 pcp Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian: Security Advisory (DSA-2535-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2533-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2487-1 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory DSA 2487-1. OpenVAS Vulnerability Test $Id: deb24871.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2487-1 openoffice.org Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Debian DSA-2535-1 : rtfm - XSS

It was discovered that rtfm, the Request Tracker FAQ Manager, contains multiple cross-site scripting vulnerabilities in the topic administration page. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Debian DSA-2534-1 : postgresql-8.4 - several vulnerabilities

Two vulnerabilities related to XML processing were discovered in PostgreSQL, a SQL database. - CVE-2012-3488 contrib/xml2's xsltprocess can be used to read and write external files and URLs. - CVE-2012-3489 xmlparse fetches external files or URLs to resolve DTD and entity references in XML values...

Debian DSA-2533-1 : pcp - several vulnerabilities

It was discovered that Performance Co-Pilot pcp, a framework for performance monitoring, contains several vulnerabilities. - CVE-2012-3418 Multiple buffer overflows in the PCP protocol decoders can cause PCP clients and servers to crash or, potentially, execute arbitrary code while processing...

Debian DSA-2531-1 : xen - Denial of Service

Several denial-of-service vulnerabilities have been discovered in Xen, the popular virtualization software. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2012-3432 Guest mode unprivileged code, which has been granted the privilege to access MMIO regions,...

Debian DSA-2530-1 : rssh - shell command injection

Henrik Erkkonen discovered that rssh, a restricted shell for SSH, does not properly restrict shell access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2530. The text itself is copyrigh...

Debian DSA-2527-1 : php5 - several vulnerabilities

Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2012-2688 A buffer overflow in the scandir function could lead to denial of service or the execution of arbitrary code. -...

Debian DSA-2526-1 : libotr - heap-based buffer overflows

Just Ferguson discovered that libotr, an off-the-record OTR messaging library, can be forced to perform zero-length allocations for heap buffers that are used in base64 decoding routines. An attacker can exploit this flaw by sending crafted messages to an application that is using libotr to perfo...