Debian: Security Advisory (DSA-1279-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1147-1 (drupal)

The remote host is missing an update to drupal announced via advisory DSA 1147-1. Ayman Hourieh discovered that Drupal, a dynamic website platform, performs insufficient input sanitising in the user module, which might lead to cross-site scripting. OpenVAS Vulnerability Test $Id: deb11471.nasl 66...

[SECURITY] [DSA 1462-1] New hplip packages fix privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1462-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 13, 2008 http://www.debian.org/security/faq -...

DSA-1462-1 hplip - missing input sanitising

Bulletin has no description...

Debian DSA-1439-1 : typo3-src - missing input sanitising

Henning Pingel discovered that TYPO3, a web content management framework, performs insufficient input sanitising, making it vulnerable to SQL injection by logged-in backend users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 1439-1] New typo3-src packages fix SQL injection

------------------------------------------------------------------------ Debian Security Advisory DSA-1439-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 28, 2007 http://www.debian.org/security/faq -...

Debian DSA-1418-1 : cacti - missing input sanitising

It was discovered that Cacti, a tool to monitor systems and networks, performs insufficient input sanitising, which allows SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Debian DSA-1417-1 : asterisk - missing input sanitising

Tilghman Lesher discovered that the logging engine of Asterisk, a free software PBX and telephony toolkit, performs insufficient sanitising of call-related data, which may lead to SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

DSA-1418-1 cacti - SQL injection

Bulletin has no description...

Debian DSA-1405-3 : zope-cmfplone - missing input sanitising

It was discovered that Plone, a web content management system, allows remote attackers to execute arbitrary code via specially crafted web browser cookies. The oldstable distribution sarge is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text a...

[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 11th, 2007 http://www.debian.org/security/faq -...

Debian DSA-1403-1 : phpmyadmin - missing input sanitising

Omer Singer of the DigiTrust Group discovered several vulnerabilities in phpMyAdmin, an application to administrate MySQL over the WWW. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-5589 phpMyAdmin allows a remote attacker to inject arbitrary web...

Debian DSA-1389-2 : zoph - missing input sanitising

It was discovered that zoph, a web-based photo management system, performs insufficient input sanitising, which allows SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1389...

DSA-1389-2 zoph - SQL injection

Bulletin has no description...

[SECURITY] [DSA 1389-1] New zoph packages fix SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1389-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 18th, 2007 http://www.debian.org/security/faq -...

DSA-1389-1 zoph - SQL injection

Bulletin has no description...

[SECURITY] [DSA 1369-1] New gforge packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 1369-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 6th, 2007 http://www.debian.org/security/faq -...

DSA-1369-1 gforge - SQL injection

Bulletin has no description...

Debian DSA-1366-1 : clamav - several vulnerabilities

Several remote vulnerabilities have been discovered in the Clam anti-virus toolkit. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-4510 It was discovered that the RTF and RFC2397 parsers can be tricked into dereferencing a NULL pointer, resulting i...

Debian DSA-1345-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3844 'mozbugra4' discovered that a regression in the handling of'about:blank' windows used ...