Test Kennung:	1.3.6.1.4.1.25623.1.0.63035
Kategorie:	Gentoo Local Security Checks
Titel:	Gentoo Security Advisory GLSA 200812-20 (phpcollab)
Zusammenfassung:	The remote host is missing updates announced in;advisory GLSA 200812-20.
Beschreibung:	Summary: The remote host is missing updates announced in advisory GLSA 200812-20. Vulnerability Insight: Multiple vulnerabilities have been discovered in phpCollab allowing for remote injection of shell commands, PHP code and SQL statements. Solution: phpCollab has been removed from the Portage tree. We recommend that users unmerge phpCollab: # emerge --unmerge 'www-apps/phpcollab' CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2006-1495 BugTraq ID: 17283 http://www.securityfocus.com/bid/17283 BugTraq ID: 17286 http://www.securityfocus.com/bid/17286 https://www.exploit-db.com/exploits/1617 http://security.gentoo.org/glsa/glsa-200812-20.xml http://downloads.securityfocus.com/vulnerabilities/exploits/PHPCollab_NetOffice_SQLINJ.php http://www.osvdb.org/24226 http://www.osvdb.org/24230 http://secunia.com/advisories/19449 http://secunia.com/advisories/19452 http://secunia.com/advisories/33258 http://www.vupen.com/english/advisories/2006/1141 http://www.vupen.com/english/advisories/2006/1142 XForce ISS Database: netoffice-sendpassword-sql-injection(25503) https://exchange.xforce.ibmcloud.com/vulnerabilities/25503 XForce ISS Database: phpcollab-sendpassword-sql-injection(25505) https://exchange.xforce.ibmcloud.com/vulnerabilities/25505 Common Vulnerability Exposure (CVE) ID: CVE-2008-4303 BugTraq ID: 32964 http://www.securityfocus.com/bid/32964 XForce ISS Database: phpcollab-login-sql-injection(47520) https://exchange.xforce.ibmcloud.com/vulnerabilities/47520 Common Vulnerability Exposure (CVE) ID: CVE-2008-4304 XForce ISS Database: phpcollab-login-command-execution(47522) https://exchange.xforce.ibmcloud.com/vulnerabilities/47522 Common Vulnerability Exposure (CVE) ID: CVE-2008-4305 XForce ISS Database: phpcollab-settings-code-execution(47521) https://exchange.xforce.ibmcloud.com/vulnerabilities/47521
Copyright	Copyright (C) 2008 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.