Debian update for sitebar - Secunia Advisories - Vulnerability Intelligence

Debian update for sitebar
Secunia Advisory:	SA28008	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2007-12-10
Popularity:	2,892 views

Critical:	Moderately critical
Impact:	Cross Site Scripting Exposure of sensitive information System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 3.1 Debian GNU/Linux 4.0 Debian GNU/Linux unstable alias sid

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2007-5491 CVE-2007-5492 CVE-2007-5693 CVE-2007-5694 CVE-2007-5695 CVE-2007-5692

Description: Debian has issued an update for sitebar. This fixes some vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks, and by malicious users to disclose potentially sensitive information and compromise a vulnerable system. For more information: SA20841 Solution: Apply updated packages. -- Debian GNU/Linux 3.1 alias sarge -- Source archives: http://security.debian.org/pool/updat...tebar/sitebar_3.2.6-7.1sarge1.diff.gz Size/MD5 checksum: 12821 c38ed9e586c8b07b23349588f2be23b2 http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.2.6.orig.tar.gz Size/MD5 checksum: 333352 a86243f7a70a1a9ac80342fbcca14297 http://security.debian.org/pool/updat...s/sitebar/sitebar_3.2.6-7.1sarge1.dsc Size/MD5 checksum: 580 7654849ce1ea822b9b70c52a98def837 Architecture independent packages: http://security.debian.org/pool/updat...tebar/sitebar_3.2.6-7.1sarge1_all.deb Size/MD5 checksum: 341570 6e106cf5dddb0ee63f29efdcf93d8d74 -- Debian GNU/Linux 4.0 alias etch -- Source archives: http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.3.8-7etch1.dsc Size/MD5 checksum: 583 8af7750ff9a808798bf1b898c69b84d6 http://security.debian.org/pool/updat.../sitebar/sitebar_3.3.8-7etch1.diff.gz Size/MD5 checksum: 22552 cdc186193c2ad2d4e69f220dd8372ccd http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.3.8.orig.tar.gz Size/MD5 checksum: 686944 fa7b5367808966c8db6241f475f3ef2f Architecture independent packages: http://security.debian.org/pool/updat.../sitebar/sitebar_3.3.8-7etch1_all.deb Size/MD5 checksum: 709524 16eb8791acea7cf1c99ac61b7b47e4b1 -- Debian GNU/Linux unstable alias sid -- Fixed in version 3.3.8-12.1. Original Advisory: http://lists.debian.org/debian-securi...-security-announce-2007/msg00204.html Other References: SA20841: http://secunia.com/advisories/20841/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	20
New vulnerabilities:	45
Updated advisories:	31

Not // 154 views

Linux Kernel PARISC "parisc_show_stack() " Denial of Service

Not // 137 views

IBM HMC HTTP TRACE Response Cross-Site Scripting Weakness

Moderately // 206 views

PHP ZipArchive::extractT o() Directory Traversal Vulnerability

Moderately // 158 views

RSyslog "AllowedSender" Security Bypass Vulnerability

Moderately // 234 views

Nagios Unspecified CGI Vulnerability

Highly // 194 views

RadAsm ".rap" Processing Buffer Overflow Vulnerability

Highly // 178 views

Multi SEO phpBB "pfad" File Inclusion Vulnerability

Moderately // 185 views

PowerDNS CH HINFO Denial of Service Vulnerability

Less // 190 views

Drupal Storm Module SQL Injection Vulnerabilities

Moderately // 180 views

Check Up System for Thai Healthcare "search" SQL Injection

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.