Debian: Security Advisory (DSA-1467-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1467-1 (mantis)

The remote host is missing an update to mantis announced via advisory DSA 1467-1. OpenVAS Vulnerability Test $Id: deb14671.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1467-1 mantis Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1467-1 : mantis - several vulnerabilities

Several remote vulnerabilities have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-6574 Custom fields were not appropriately protected by per-item access control, allowing for sensitive da...

[SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1467-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 19, 2008 http://www.debian.org/security/faq -...

DSA-1467-1 mantis - several vulnerabilities

Bulletin has no description...

CVE-2006-6574

CVE-2006-6574 affects MantisBT. The vulnerability is that Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), allowing remote attackers to obtain sensitive information by reading the Change column (e.g., in a custom field). This is the exact issue des...