306 matches found
Debian: Security Advisory (DSA-1730-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-1730-1 : proftpd-dfsg - SQL injection vulnerabilites
The security update for proftpd-dfsg in DSA-1727-1 caused a regression with the postgresql backend. This update corrects the flaw. Also it was discovered that the oldstable distribution etch is not affected by the security issues. For reference the original advisory follows. Two SQL injection...
[SECURITY] [DSA 1730-1] New proftpd-dfsg packages fix SQL injection vulnerabilites
------------------------------------------------------------------------ Debian Security Advisory DSA-1730-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 02, 2009 http://www.debian.org/security/faq -...
DSA-1730-1 proftpd-dfsg - SQL injection vulnerabilites
Bulletin has no description...
[SECURITY] [DSA 1727-1] New proftpd-dfsg packages fix SQL injection vulnerabilites
-------------------------------------------------------------------------- Debian Security Advisory DSA 1727-1 [email protected] http://www.debian.org/security/ Steffen Joeris February 26th, 2009 http://www.debian.org/security/faq -...
Debian DSA-1727-1 : proftpd-dfsg - SQL injection vulnerabilites
Two SQL injection vulnerabilities have been found in proftpd, a virtual-hosting FTP daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0542 Shino discovered that proftpd is prone to a SQL injection vulnerability via the use of certain character...
Debian: Security Advisory (DSA-1689-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1689-1 (proftpd-dfsg)
The remote host is missing an update to proftpd-dfsg announced via advisory DSA 1689-1. OpenVAS Vulnerability Test $Id: deb16891.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1689-1 proftpd-dfsg Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...
Debian DSA-1689-1 : proftpd-dfsg - missing input validation
Maksymilian Arciemowicz of securityreason.com reported that ProFTPD is vulnerable to cross-site request forgery CSRF attacks and executes arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser. %NASLMINLEVEL 70300 C...
[SECURITY] [DSA 1689-1] New proftpd-dfsg packages fix Cross-Site Request Forgery
-------------------------------------------------------------------------- Debian Security Advisory DSA 1689-1 [email protected] http://www.debian.org/security/ Martin Schulze December 21st, 2008 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1662-1 (mysql-dfsg-5.0)
The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1662-1. OpenVAS Vulnerability Test $Id: deb16621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1662-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...
[SECURITY] [DSA 1662-1] New mysql-dfsg-5.0 packages fix authorization bypass
------------------------------------------------------------------------ Debian Security Advisory DSA-1662-1 [email protected] http://www.debian.org/security/ Devin Carraway November 06, 2008 http://www.debian.org/security/faq -...
[Backports-security-announce] Security Update for proftpd-dfsg
Francesco Paolo Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2008-4242, Debian Bug 502674 ProFTPD 1.3.1 interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF...
Debian: Security Advisory (DSA-1630-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1608-1 (mysql-dfsg-5.0)
The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1608-1. OpenVAS Vulnerability Test $Id: deb16081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1608-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...
Debian DSA-1608-1 : mysql-dfsg-5.0 - authorization bypass
Sergei Golubchik discovered that MySQL, a widely-deployed database server, did not properly validate optional data or index directory paths given in a CREATE TABLE statement, nor would it under proper conditions prevent two databases from using the same paths for data or index files. This permits...
[SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1588-2 [email protected] http://www.debian.org/security/ dann frazier May 30, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
Debian Security Advisory DSA 1586-1 (xine-lib)
The remote host is missing an update to xine-lib announced via advisory DSA 1586-1. OpenVAS Vulnerability Test $Id: deb15861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1586-1 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian Security Advisory DSA 1575-1 (linux-2.6)
The remote host is missing an update to linux-2.6 announced via advisory DSA 1575-1. OpenVAS Vulnerability Test $Id: deb15751.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1575-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...