Info

Disclosure

Jun 22, 2005

Discovery

May 12, 2005

Dates

Exploit

Unknown

Solution

Jun 22, 2005

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Upgrade to version 0.8.6e or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1014252
Secunia Advisory ID: 15490 15931 16136
Related OSVDB ID: 17424 17425
CVE ID: 2005-1524 (see also: NVD)
Other Advisory URL: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000978
http://www.debian.org/security/2005/dsa-764
http://www.idefense.com/application/poi/display?id=265&type=vulnerabilities
Vendor Specific Advisory URL: http://security.gentoo.org/glsa/glsa-200506-20.xml
Vendor Specific News/Changelog Entry: http://www.cacti.net/release_notes_0_8_6e.php

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/17426