Debian Security Advisory DSA 944-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 944-1. Several security related problems have been discovered in Mantis, a web-based bug tracking system. For details on the issues resolved, please visit the referenced advisories. The old stable distribution woody does no...

[SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 944-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4518

CVE-2005-4518 affects Mantis before 0.19.4. An attacker can bypass the file upload size restriction by altering max_file_size in bug_file_add.php, bug_report.php, bug_report_advanced_page.php, or proj_doc_add_page.php. Public advisories (Debian GLSA/DSA, Gentoo GLSA) document fixed versions (e.g....