CVE-2009-3303

Description

References

• secunia.com/advisories/37450 · Vendor Advisory
• security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch12.diff.gz · Patch
• debian.org/security/2009/dsa-1937 · Patch
• securityfocus.com/bid/37088 · Patch

Weitere Schwachstellen in gforge

• CVE-2009-3304NIEDRIG 3.3GForge 4.5.14, 4.7 rc2, and 4.8.2 allows local users to overwrite arbitrary files via a symlink attack on authorized_keys files in users' ho…
• CVE-2009-4070HOCH 7.5SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands v…
• CVE-2009-4069MITTEL 4.3Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject ar…
• CVE-2008-6189HOCH 7.5SQL injection vulnerability in GForge 4.5.19 allows remote attackers to execute arbitrary SQL commands via the offset parameter to (1) new/i…
• CVE-2008-6188HOCH 7.5SQL injection vulnerability in people/editprofile.php in Gforge 4.6 rc1 and earlier allows remote attackers to execute arbitrary SQL command…