Anfälligkeitssuche        Suche in 219043 CVE Beschreibungen
und 99761 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.71355
Kategorie:Debian Local Security Checks
Titel:Debian Security Advisory DSA 2477-1 (sympa)
Zusammenfassung:The remote host is missing an update to sympa;announced via advisory DSA 2477-1.
Beschreibung:Summary:
The remote host is missing an update to sympa
announced via advisory DSA 2477-1.

Vulnerability Insight:
Several vulnerabilities have been discovered in Sympa, a mailing list
manager, that allow to skip the scenario-based authorization
mechanisms. This vulnerability allows to display the archives
management page, and download and delete the list archives by
unauthorized users.

For the stable distribution (squeeze), this problem has been fixed in
version 6.0.1+dfsg-4+squeeze1.

For the testing distribution (wheezy), this problem will be fixed
soon.

For the unstable distribution (sid), this problem has been fixed in
version 6.1.11~
dfsg-2.

Solution:
We recommend that you upgrade your sympa packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-2352
BugTraq ID: 53503
http://www.securityfocus.com/bid/53503
Debian Security Information: DSA-2477 (Google Search)
http://www.debian.org/security/2012/dsa-2477
http://www.openwall.com/lists/oss-security/2012/05/11/8
http://www.openwall.com/lists/oss-security/2012/05/12/2
http://www.openwall.com/lists/oss-security/2012/05/12/8
http://www.osvdb.org/81890
http://secunia.com/advisories/49045
http://secunia.com/advisories/49237
CopyrightCopyright (c) 2012 E-Soft Inc. http://www.securityspace.com

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2024 E-Soft Inc. Alle Rechte vorbehalten.