CVE-2008-1474

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting XSS...

CVE-2008-1474

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting XSS...

Cross site scripting

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting XSS...

PYSEC-2008-10

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

PYSEC-2008-10

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

PYSEC-2008-9

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting XSS...

Design/Logic Flaw

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

CVE-2008-1474

Roundup CVE-2008-1474 and CVE-2008-1475 affect Roundup prior to 1.4.4. Connected sources confirm two issues: CVE-2008-1474 involves multiple unspecified vulnerabilities with possible XSS; CVE-2008-1475 pertains to XML-RPC permission checks (permission bypass). OpenVAS entries list a base CVSS of ...

CVE-2008-1475

CVE-2008-1475 concerns the xml-rpc server in Roundup 1.4.4, which does not check property permissions, allowing attackers to bypass restrictions and read or edit restricted properties via the (1) list, (2) display, and (3) set methods. The connected documents corroborate the same description and ...

CVE-2008-1475

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

CVE-2008-1474

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting XSS...

[SECURITY] Fedora 8 Update: roundup-1.4.4-1.fc8

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...

[SECURITY] Fedora 7 Update: roundup-1.4.4-1.fc7

Roundup is a simple and flexible issue-tracking system with command line, web and email interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition...

Fedora 8 : roundup-1.4.4-1.fc8 (2008-2471)

Fri Mar 7 2008 Paul P. Komkoff Jr - 1.4.4-1 - new upstream version with security fixes bz436546 - Wed Feb 20 2008 Paul P. Komkoff Jr - 1.4.1-2 - new upstream version - Wed Jan 23 2008 Paul P. Komkoff Jr - 1.4.1-1 - new upstream version Note that Tenable Network Security has extracted the...

Fedora 7 : roundup-1.4.4-1.fc7 (2008-2370)

Bug 436546 - Roundup 1.4.4 contains some sekrit security fixes Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

FreeBSD : roundup (1608)

The following package needs to be updated: roundup %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

CVE-2004-1444

CVE-2004-1444 describes a directory traversal vulnerability in Roundup 0.6.4 and earlier. An attacker can view arbitrary files by injecting ".." sequences in an @@ command within an HTTP GET request. The issue affects Roundup’s web-facing handling and exposes files the Roundup process can access....

CVE-2004-1444

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. dot dot sequences in an @@ command in an HTTP GET request...

CVE-2004-1444

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. dot dot sequences in an @@ command in an HTTP GET request...

GLSA-200408-09 : Roundup: Filesystem access vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-09 Roundup: Filesystem access vulnerability Improper handling of a specially crafted URL allows access to the server's filesystem, which could contain sensitive information. Impact : An attacker could view files owned by th...