Test ID:	1.3.6.1.4.1.25623.1.0.72582
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201211-01 (MantisBT)
Summary:	The remote host is missing updates announced in;advisory GLSA 201211-01.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 201211-01. Vulnerability Insight: Multiple vulnerabilities have been found in MantisBT, the worst of which allowing for local file inclusion. Solution: All MantisBT users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=www-apps/mantisbt-1.2.11' CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3303 41653 http://secunia.com/advisories/41653 43604 http://www.securityfocus.com/bid/43604 51199 http://secunia.com/advisories/51199 ADV-2010-2535 http://www.vupen.com/english/advisories/2010/2535 FEDORA-2010-15061 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048548.html FEDORA-2010-15080 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048639.html FEDORA-2010-15082 http://lists.fedoraproject.org/pipermail/package-announce/2010-September/048659.html GLSA-201211-01 http://security.gentoo.org/glsa/glsa-201211-01.xml [oss-security] 20100914 CVE request: mantis before 1.2.3 (XSS) http://www.openwall.com/lists/oss-security/2010/09/14/12 [oss-security] 20100914 Re: CVE request: mantis before 1.2.3 (XSS) http://www.openwall.com/lists/oss-security/2010/09/14/13 http://www.openwall.com/lists/oss-security/2010/09/14/19 [oss-security] 20100916 Re: CVE request: mantis before 1.2.3 (XSS) http://www.openwall.com/lists/oss-security/2010/09/16/16 http://www.mantisbt.org/bugs/changelog_page.php?version_id=111 http://www.mantisbt.org/bugs/view.php?id=12231 http://www.mantisbt.org/bugs/view.php?id=12232 http://www.mantisbt.org/bugs/view.php?id=12234 http://www.mantisbt.org/bugs/view.php?id=12238 Common Vulnerability Exposure (CVE) ID: CVE-2010-3763 BugTraq ID: 43837 http://www.securityfocus.com/bid/43837 http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html http://secunia.com/advisories/42772 http://www.vupen.com/english/advisories/2011/0002 Common Vulnerability Exposure (CVE) ID: CVE-2010-4348 42772 ADV-2011-0002 FEDORA-2010-19070 FEDORA-2010-19078 [oss-security] 20101215 CVE request: MantisBT <=1.2.3 (db_type) Cross-Site Scripting & Path Disclosure Vulnerability http://openwall.com/lists/oss-security/2010/12/15/4 [oss-security] 20101216 Re: CVE request: MantisBT <=1.2.3 (db_type) Cross-Site Scripting & Path Disclosure Vulnerability http://openwall.com/lists/oss-security/2010/12/16/1 http://www.mantisbt.org/blog/?p=123 http://www.mantisbt.org/bugs/changelog_page.php?version_id=112 http://www.mantisbt.org/bugs/view.php?id=12607 http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4983.php https://bugzilla.redhat.com/show_bug.cgi?id=663230 Common Vulnerability Exposure (CVE) ID: CVE-2010-4349 mantisbt-dbtype-path-disclosure(64463) https://exchange.xforce.ibmcloud.com/vulnerabilities/64463 Common Vulnerability Exposure (CVE) ID: CVE-2010-4350 [oss-security] 20101215 CVE request: MantisBT <=1.2.3 (db_type) Local File Inclusion Vulnerability http://openwall.com/lists/oss-security/2010/12/15/5 [oss-security] 20101216 Re: CVE request: MantisBT <=1.2.3 (db_type) Local File Inclusion Vulnerability http://openwall.com/lists/oss-security/2010/12/16/2 http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4984.php Common Vulnerability Exposure (CVE) ID: CVE-2011-2938 BugTraq ID: 49235 http://www.securityfocus.com/bid/49235 http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066061.html http://packetstormsecurity.org/files/104149 http://www.openwall.com/lists/oss-security/2011/08/18/7 http://www.openwall.com/lists/oss-security/2011/08/19/16 http://securityreason.com/securityalert/8391 Common Vulnerability Exposure (CVE) ID: CVE-2011-3356 BugTraq ID: 49448 http://www.securityfocus.com/bid/49448 Bugtraq: 20110905 Multiple vulnerabilities in MantisBT (Google Search) http://www.securityfocus.com/archive/1/519547/100/0/threaded https://www.htbridge.ch/advisory/multiple_vulnerabilities_in_mantisbt.html http://lists.debian.org/debian-security-tracker/2011/09/msg00012.html http://www.openwall.com/lists/oss-security/2011/09/04/1 http://www.openwall.com/lists/oss-security/2011/09/09/9 http://securityreason.com/securityalert/8392 XForce ISS Database: mantisbt-unspecified-xss(69587) https://exchange.xforce.ibmcloud.com/vulnerabilities/69587 Common Vulnerability Exposure (CVE) ID: CVE-2011-3357 Debian Security Information: DSA-2308 (Google Search) http://www.debian.org/security/2011/dsa-2308 http://www.openwall.com/lists/oss-security/2011/09/04/2 http://secunia.com/advisories/45961 XForce ISS Database: mantisbt-action-file-include(69588) https://exchange.xforce.ibmcloud.com/vulnerabilities/69588 Common Vulnerability Exposure (CVE) ID: CVE-2011-3358 XForce ISS Database: mantisbt-bugreportpage-xss(69589) https://exchange.xforce.ibmcloud.com/vulnerabilities/69589 Common Vulnerability Exposure (CVE) ID: CVE-2011-3578 Common Vulnerability Exposure (CVE) ID: CVE-2011-3755 http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/mantisbt-1.2.4 http://www.openwall.com/lists/oss-security/2011/06/27/6 Common Vulnerability Exposure (CVE) ID: CVE-2012-1118 48258 http://secunia.com/advisories/48258 49572 http://secunia.com/advisories/49572 52313 http://www.securityfocus.com/bid/52313 DSA-2500 http://www.debian.org/security/2012/dsa-2500 FEDORA-2012-18273 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092926.html FEDORA-2012-18294 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093064.html FEDORA-2012-18299 http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093063.html [oss-security] 20120306 Re: CVE request: mantisbt before 1.2.9 http://www.openwall.com/lists/oss-security/2012/03/06/9 http://www.mantisbt.org/bugs/changelog_page.php?version_id=140 http://www.mantisbt.org/bugs/view.php?id=10124 https://github.com/mantisbt/mantisbt/commit/eb803ed02105fc919cf5f789e939f2b824162927 Common Vulnerability Exposure (CVE) ID: CVE-2012-1119 http://www.mantisbt.org/bugs/view.php?id=13816 https://github.com/mantisbt/mantisbt/commit/cf5df427f17cf9204645f83e000665780eb9afe6 https://github.com/mantisbt/mantisbt/commit/dea7e315f3fc96dfa995e56e8810845fc07a47aa Common Vulnerability Exposure (CVE) ID: CVE-2012-1120 http://www.mantisbt.org/bugs/view.php?id=13656 https://github.com/mantisbt/mantisbt/commit/df7782a65e96aa1c9639a7625a658102134c7fe0 Common Vulnerability Exposure (CVE) ID: CVE-2012-1121 http://www.mantisbt.org/bugs/view.php?id=13561 https://github.com/mantisbt/mantisbt/commit/9443258724e84cb388aa1865b775beaecd80596d Common Vulnerability Exposure (CVE) ID: CVE-2012-1122 http://www.mantisbt.org/bugs/view.php?id=13748 https://github.com/mantisbt/mantisbt/commit/0da3f7ace233208eb3c8d628cc2fd6e56d83839f Common Vulnerability Exposure (CVE) ID: CVE-2012-1123 http://www.mantisbt.org/bugs/view.php?id=13901 https://github.com/mantisbt/mantisbt/commit/f5106be52cf6aa72c521f388e4abb5f0de1f1d7f Common Vulnerability Exposure (CVE) ID: CVE-2012-2691 49414 http://secunia.com/advisories/49414 53907 http://www.securityfocus.com/bid/53907 56467 http://www.securityfocus.com/bid/56467 [oss-security] 20120609 CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11 http://www.openwall.com/lists/oss-security/2012/06/09/1 [oss-security] 20120611 Re: CVE requests (x2) for Mantis Bug Tracker (MantisBT) before 1.2.11 http://www.openwall.com/lists/oss-security/2012/06/11/6 http://www.mantisbt.org/bugs/changelog_page.php?version_id=148 http://www.mantisbt.org/bugs/view.php?id=14340 https://github.com/mantisbt/mantisbt/commit/175d973105fe9f03a37ced537b742611631067e0 https://github.com/mantisbt/mantisbt/commit/edc8142bb8ac0ac0df1a3824d78c15f4015d959e mantisbt-soapapi-sec-bypass(76180) https://exchange.xforce.ibmcloud.com/vulnerabilities/76180 Common Vulnerability Exposure (CVE) ID: CVE-2012-2692 53921 http://www.securityfocus.com/bid/53921 http://www.mantisbt.org/bugs/view.php?id=14016 https://github.com/mantisbt/mantisbt/commit/ceafe6f0c679411b81368052633a63dd3ca06d9c
Copyright	Copyright (C) 2012 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.