Secunia Logo  
 Vulnerability IntelligenceVulnerability ScanningCommunityBlog - new entry!Corporate InformationOnline ShopCustomer Login  
 Secunia AdvisoriesSecunia ResearchBinary Analysis  
Home > Vulnerability Intelligence > Secunia Advisories > Debian update for webcalendar
Secunia Advisories
Advisories
Search
Advisories by Product
Advisories by Vendor
Historic Advisories
Mailing Lists & RSS
Report Vulnerability
Contact Form
Business Solutions Restricted
Partner Solutions Restricted
About
 
Debian update for webcalendar
Secunia Advisory: SA20108
Advisory Toolbox:
Issue ticket
Save in to-do list
Mark as handled
Exploit information
Download as PDF
Review actions
Add comment
Release Date: 2006-05-15
Popularity: 5,147 views

Critical:
Not critical
Impact: Exposure of system information
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 3.1
Debian GNU/Linux unstable alias sid
Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-2247
Description:
Debian has issued an update for webcalendar. This fixes a weakness, which can be exploited by malicious people to identify valid user accounts.

For more information:
SA19974

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updat...lendar/webcalendar_0.9.45-4sarge4.dsc
Size/MD5 checksum: 610 1a88e45355b0ca1a474eba42ac6c8eb4
http://security.debian.org/pool/updat...ar/webcalendar_0.9.45-4sarge4.diff.gz
Size/MD5 checksum: 12135 a518268d52b8a4744dd31ae9a7b60d0c
http://security.debian.org/pool/updat...lendar/webcalendar_0.9.45.orig.tar.gz
Size/MD5 checksum: 612360 a6a66dc54cd293429b604fe6da7633a6

Architecture independent components:

http://security.debian.org/pool/updat...ar/webcalendar_0.9.45-4sarge4_all.deb
Size/MD5 checksum: 629232 c83c6d64bf495a79cc6fad26b68708e0

-- Debian GNU/Linux unstable alias sid --

The weakness will reportedly be fixed soon.

Original Advisory:
http://www.us.debian.org/security/2006/dsa-1056

Other References:
SA19974:
http://secunia.com/advisories/19974/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

9th Jan, 2009
New advisories: 14
New vulnerabilities: 38
Updated advisories: 21

Less // 236 views
Interstage HTTP Server mod_proxy_ftp Cross-Site Scripting
Moderately // 206 views
Pizzis CMS "idvar" SQL Injection Vulnerability
Less // 241 views
Openfire Multiple Vulnerabilities
Moderately // 255 views
OpenBSD update for OpenSSL
Less // 213 views
MODx "searchid" SQL Injection Vulnerability
Not // 320 views
Asterisk User Account Enumeration Weakness
Less // 335 views
Sun Solaris Samba "smbd" Information Disclosure Vulnerability
Less // 312 views
Serv-U Denial of Service Vulnerability
Less // 283 views
CuteNews Cross-Site Scripting and PHP Code Execution Vulnerabilities
Highly // 354 views
XOOPS "mydirname" PHP Code Injection Vulnerability

Solutions | More...  

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpBB BBcode "url" Script Insertion Vulnerability // 25 views
2. Interstage HTTP Server mod_proxy_ftp Cross-Site Scripting // 25 views
3. phpBB Avatar Script Insertion Vulnerability // 23 views
4. XOOPS "mydirname" PHP Code Injection Vulnerability // 23 views
5. OpenBSD update for OpenSSL // 23 views
6. phpBB Avatar Functions Information Disclosure and Deletion // 22 views
7. Asterisk User Account Enumeration Weakness // 22 views
8. Internet Explorer Data Binding Memory Corruption Vulnerability // 21 views
9. Sun Solaris Samba "smbd" Information Disclosure Vulnerability // 21 views
10. Drupal Project Module File Upload and Cross-Site Scripting // 21 views



Contact | Terms & Conditions and Copyright | Report Vulnerability | Press | Jobs | About Secunia
Copyright Secunia 2002-2009