Test ID:	1.3.6.1.4.1.25623.1.0.66772
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1978-1)
Summary:	The remote host is missing an update for the Debian 'phpgroupware' package(s) announced via the DSA-1978-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'phpgroupware' package(s) announced via the DSA-1978-1 advisory. Vulnerability Insight: Several remote vulnerabilities have been discovered in phpgroupware, a Web based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-4414 An SQL injection vulnerability was found in the authentication module. CVE-2009-4415 Multiple directory traversal vulnerabilities were found in the addressbook module. CVE-2009-4416 The authentication module is affected by cross-site scripting. For the stable distribution (lenny) these problems have been fixed in version 0.9.16.012+dfsg-8+lenny1. For the unstable distribution (sid) these problems have been fixed in version 0.9.16.012+dfsg-9. We recommend that you upgrade your phpgroupware packages. Affected Software/OS: 'phpgroupware' package(s) on Debian 5. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4414 BugTraq ID: 35761 http://www.securityfocus.com/bid/35761 http://www.openwall.com/lists/oss-security/2009/12/20/1 http://www.osvdb.org/56178 http://secunia.com/advisories/35519 XForce ISS Database: phpgroupware-login-sql-injection(51922) https://exchange.xforce.ibmcloud.com/vulnerabilities/51922 Common Vulnerability Exposure (CVE) ID: CVE-2009-4415 http://www.osvdb.org/56177 http://www.osvdb.org/56180 XForce ISS Database: phpgroupware-convtype-file-include(51924) https://exchange.xforce.ibmcloud.com/vulnerabilities/51924 XForce ISS Database: phpgroupware-csvimport-info-disclosure(51921) https://exchange.xforce.ibmcloud.com/vulnerabilities/51921 Common Vulnerability Exposure (CVE) ID: CVE-2009-4416 http://kambing.ui.ac.id/gentoo-portage/www-apps/phpgroupware/files/phpgroupware-SA35519.patch http://www.osvdb.org/56179 XForce ISS Database: phpgroupware-query-xss(51923) https://exchange.xforce.ibmcloud.com/vulnerabilities/51923
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.