[SECURITY] [DSA 2073-1] New mlmmj packages fix directory traversal

------------------------------------------------------------------------ Debian Security Advisory DSA-2073-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 20, 2010 http://www.debian.org/security/faq -...

DSA-2067-1 mahara - several vulnerabilities

Bulletin has no description...

Debian DSA-2039-1 : cacti - missing input sanitising

It was discovered that Cacti, a frontend to rrdtool for monitoring systems and services missed input sanitising, making a SQL injection attack possible. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-2039-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst April 23, 2010 http://www.debian.org/security/faq -...

DSA-2039-1 cacti - missing input sanitising

Bulletin has no description...

Debian DSA-2024-1 : moin - insufficient input sanitising

Jamie Strandboge discovered that moin, a python clone of WikiWiki, does not sufficiently sanitize the page name in 'Despam' action, allowing remote attackers to perform cross-site scripting XSS attacks. In addition, this update fixes a minor issue in the 'textcha' protection, it could be triviall...

[SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2024-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 31, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2024-1] New moin packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2024-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano March 31, 2010 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2004-1 (samba)

The remote host is missing an update to samba announced via advisory DSA 2004-1. OpenVAS Vulnerability Test $Id: deb20041.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2004-1 samba Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

DSA-2013-1 egroupware - several vulnerabilities

Bulletin has no description...

[SECURITY] [DSA 2009-1] New tdiary packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2009-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 09, 2010 http://www.debian.org/security/faq -...

Debian DSA-1836-1 : fckeditor - missing input sanitising

Vinny Guido discovered that multiple input sanitising vulnerabilities in Fckeditor, a rich text web editor component, may lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-1965-1 : phpldapadmin - missing input sanitising

It was discovered that phpLDAPadmin, a web-based interface for administering LDAP servers, doesn't sanitize an internal variable, which allows remote attackers to include and execute arbitrary local files. The oldstable distribution etch is not affected by this problem. %NASLMINLEVEL 70300 C...

Debian DSA-1937-1 : gforge - insufficient input sanitising

It was discovered that gforge, collaborative development tool, is prone to a cross-site scripting attack via the helpname parameter. Beside fixing this issue, the update also introduces some additional input sanitising. However, there are no known attack vectors. %NASLMINLEVEL 70300 C Tenable...

Debian DSA-1954-1 : cacti - insufficient input sanitising

Several vulnerabilities have been found in cacti, a frontend to rrdtool for monitoring systems and services. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3112, CVE-2007-3113 It was discovered that cacti is prone to a denial of service via the...

Debian DSA-1947-1 : shibboleth-sp, shibboleth-sp2, opensaml2 - missing input sanitising

Matt Elder discovered that Shibboleth, a federated web single sign-on system is vulnerable to script injection through redirection URLs. More details can be found in the Shibboleth advisory at http://shibboleth.internet2.edu/secadv/secadv20091104.txt. %NASLMINLEVEL 70300 C Tenable Network Securit...

Debian DSA-1949-1 : php-net-ping - programming error

It was discovered that php-net-ping, a PHP PEAR module to execute ping independently of the Operating System, performs insufficient input sanitising, which might be used to inject arguments no CVE yet or execute arbitrary commands CVE-2009-4024 on a system that uses php-net-ping. %NASLMINLEVEL...

Debian DSA-1875-1 : ikiwiki - missing input sanitising

Josh Triplett discovered that the blacklist for potentially harmful TeX code of the teximg module of the Ikiwiki wiki compiler was incomplete, resulting in information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-1829-1 : sork-passwd-h3 - insufficient input sanitising

It was discovered that sork-passwd-h3, a Horde3 module for users to change their password, is prone to a cross-site scripting attack via the backend parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

Debian DSA-1887-1 : rails - missing input sanitising

Brian Mastenbrook discovered that rails, the MVC ruby based framework geared for web application development, is prone to cross-site scripting attacks via malformed strings in the form helper. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...