Debian: Security Advisory (DSA-1208-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1208-1 (bugzilla)

The remote host is missing an update to bugzilla announced via advisory DSA 1208-1. Several remote vulnerabilities have been discovered in the Bugzilla bug tracking system, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following...

[SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1208-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 11th, 2006 http://www.debian.org/security/faq -...

CVE-2005-4534

CVE-2005-4534 affects Bugzilla versions 2.9–2.16.10 via the shadow database (syncshadowdb). A local user can exploit insecure temporary file handling to perform a symlink attack and overwrite files Bugzilla can access, potentially leading to denial of service. The advisory notes that newer versio...