Debian update for elog - Secunia Advisories - Vulnerability Intelligence

Debian update for elog
Secunia Advisory:	SA23580	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2006-12-29
Popularity:	5,498 views

Critical:	Moderately critical
Impact:	Cross Site Scripting DoS System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 3.1 Debian GNU/Linux unstable alias sid

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2006-5063 CVE-2006-5790 CVE-2006-5791 CVE-2006-6318

Description: Debian has issued an update for elog. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks and cause a DoS (Denial of Service), and malicious users to conduct script insertion attacks, cause a DoS, and potentially compromise a vulnerable system. For more information: SA22057 SA22638 SA22800 Solution: Apply updated packages. -- Debian GNU/Linux 3.1 alias sarge -- Source archives: http://security.debian.org/pool/updat.../e/elog/elog_2.5.7+r1558-4+sarge3.dsc Size/MD5 checksum: 581 c072e867caa0058ac44cbd69c6afff51 http://security.debian.org/pool/updat...log/elog_2.5.7+r1558-4+sarge3.diff.gz Size/MD5 checksum: 23758 0718302e60a98844f27cd6eab336c5ce http://security.debian.org/pool/updates/main/e/elog/elog_2.5.7+r1558.orig.tar.gz Size/MD5 checksum: 538216 e05c9fdaa02692ce20c70a5fd2748fe3 Alpha architecture: http://security.debian.org/pool/updat...g/elog_2.5.7+r1558-4+sarge3_alpha.deb Size/MD5 checksum: 556190 081bd3b98bea9516c26b487024d6140f AMD64 architecture: http://security.debian.org/pool/updat...g/elog_2.5.7+r1558-4+sarge3_amd64.deb Size/MD5 checksum: 512510 48ee1c675cefa6a0b0af01f7cbb9f079 ARM architecture: http://security.debian.org/pool/updat...log/elog_2.5.7+r1558-4+sarge3_arm.deb Size/MD5 checksum: 517072 5e4a4dc726a8a0bf75f05de3fe17e07c HP Precision architecture: http://security.debian.org/pool/updat...og/elog_2.5.7+r1558-4+sarge3_hppa.deb Size/MD5 checksum: 544448 5f5c83341837c6dd18211b4164bbd1dc Intel IA-32 architecture: http://security.debian.org/pool/updat...og/elog_2.5.7+r1558-4+sarge3_i386.deb Size/MD5 checksum: 514786 c14108b91d171ac38b0104ae769cfc96 Intel IA-64 architecture: http://security.debian.org/pool/updat...og/elog_2.5.7+r1558-4+sarge3_ia64.deb Size/MD5 checksum: 598224 df22b05edfb9dfab43cc69233f2d88e4 Motorola 680x0 architecture: http://security.debian.org/pool/updat...og/elog_2.5.7+r1558-4+sarge3_m68k.deb Size/MD5 checksum: 482826 254d8a1f1cae62719a9f6f2a461cffd8 Big endian MIPS architecture: http://security.debian.org/pool/updat...og/elog_2.5.7+r1558-4+sarge3_mips.deb Size/MD5 checksum: 522074 909b22df0ac8302bd7b00b8338511198 Little endian MIPS architecture: http://security.debian.org/pool/updat.../elog_2.5.7+r1558-4+sarge3_mipsel.deb Size/MD5 checksum: 525164 278bc7397817c8f6a8a44d2879f0682c PowerPC architecture: http://security.debian.org/pool/updat...elog_2.5.7+r1558-4+sarge3_powerpc.deb Size/MD5 checksum: 524304 37438b8fff9c0b162aa6870fd5c7ba31 IBM S/390 architecture: http://security.debian.org/pool/updat...og/elog_2.5.7+r1558-4+sarge3_s390.deb Size/MD5 checksum: 515148 32cf397b104321646de736141a90354d Sun Sparc architecture: http://security.debian.org/pool/updat...g/elog_2.5.7+r1558-4+sarge3_sparc.deb Size/MD5 checksum: 519788 b532c963d03d66f4e32861531adefe4e -- Debian GNU/Linux unstable alias sid -- Fixed in version 2.6.2+r1754-1. Original Advisory: http://www.us.debian.org/security/2006/dsa-1242 Other References: SA22057: http://secunia.com/advisories/22057/ SA22638: http://secunia.com/advisories/22638/ SA22800: http://secunia.com/advisories/22800/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	19
New vulnerabilities:	31
Updated advisories:	28

Moderately // 143 views

My PHP Indexer "d" File Disclosure Vulnerability

Moderately // 155 views

NewLife Blogger "nlb3" SQL Injection Vulnerability

Moderately // 146 views

Ayco Okul "linkid" SQL Injection Vulnerability

Less // 158 views

ScriptsEz Mini Hosting Panel "dir" File Disclosure

Not // 196 views

WinFTP "PASV" Denial of Service Vulnerability

Moderately // 197 views

Real Estates Classifieds "cat" SQL Injection Vulnerability

Moderately // 269 views

Joomla Ignite Gallery Component "gallery" SQL Injection

Moderately // 232 views

Joomla Mad4Joomla Mailforms Component "jid" SQL Injection

Moderately // 200 views

MunzurSoft Wep Portal W3 "kat" SQL Injection Vulnerability

Moderately // 235 views

Joomla OwnBiblio Component "catid" SQL Injection

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.