CVE-2007-6611

概要

参考情報

• osvdb.org/39873
• secunia.com/advisories/28185 · Vendor Advisory
• secunia.com/advisories/28352 · Vendor Advisory
• secunia.com/advisories/28551 · Vendor Advisory
• secunia.com/advisories/29198
• security.gentoo.org/glsa/glsa-200803-04.xml
• sourceforge.net/project/shownotes.php
• debian.org/security/2008/dsa-1467
• mantisbt.org/bugs/view.php
• securityfocus.com/bid/27045 · Patch
• bugzilla.redhat.com/show_bug.cgi
• redhat.com/archives/fedora-package-announce/2008-January/msg00227.html
• redhat.com/archives/fedora-package-announce/2008-January/msg00309.html

mantis のその他の脆弱性

• CVE-2008-4689高 7.5Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.
• CVE-2008-4688中 5.0core/string_api.php in Mantis before 1.1.3 does not check the privileges of the viewer before composing a link with issue data in the source…
• CVE-2008-4687緊急 9.0manage_proj_page.php in Mantis before 1.1.4 allows remote authenticated users to execute arbitrary code via a sort parameter containing PHP …
• CVE-2008-3333高 7.5Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files…
• CVE-2008-3332中 6.5Eval injection vulnerability in adm_config_set.php in Mantis before 1.1.2 allows remote authenticated administrators to execute arbitrary co…