Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.60942
Categoría:Gentoo Local Security Checks
Título:Gentoo Security Advisory GLSA 200805-04 (egroupware)
Resumen:The remote host is missing updates announced in;advisory GLSA 200805-04.
Descripción:Summary:
The remote host is missing updates announced in
advisory GLSA 200805-04.

Vulnerability Insight:
Multiple vulnerabilities in eGroupWare may lead to execution of arbitrary
PHP code, the ability to upload malicious files and cross-site scripting
attacks.

Solution:
All eGroupWare users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose '>=www-apps/egroupware-1.4.004'

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2008-1502
BugTraq ID: 28424
http://www.securityfocus.com/bid/28424
Debian Security Information: DSA-1691 (Google Search)
http://www.debian.org/security/2008/dsa-1691
Debian Security Information: DSA-1871 (Google Search)
http://www.debian.org/security/2009/dsa-1871
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00331.html
http://www.gentoo.org/security/en/glsa/glsa-200805-04.xml
http://www.egroupware.org/viewvc/branches/1.4/phpgwapi/inc/class.kses.inc.php?r1=23625&r2=25110&pathrev=25110
http://www.openwall.com/lists/oss-security/2008/07/08/14
http://secunia.com/advisories/29491
http://secunia.com/advisories/30073
http://secunia.com/advisories/30986
http://secunia.com/advisories/31017
http://secunia.com/advisories/31018
http://secunia.com/advisories/31167
http://secunia.com/advisories/32400
http://secunia.com/advisories/32446
SuSE Security Announcement: SUSE-SR:2008:015 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html
https://usn.ubuntu.com/658-1/
http://www.vupen.com/english/advisories/2008/0989/references
XForce ISS Database: egroupware-badprotocolonce-security-bypass(41435)
https://exchange.xforce.ibmcloud.com/vulnerabilities/41435
Common Vulnerability Exposure (CVE) ID: CVE-2008-2041
BugTraq ID: 28817
http://www.securityfocus.com/bid/28817
XForce ISS Database: egroupware-webserver-unspecified(42141)
https://exchange.xforce.ibmcloud.com/vulnerabilities/42141
CopyrightCopyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.