Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: Debian Local Security Checks --> Category: infos

[DSA264] DSA-264-1 lxr Vulnerability Scan

Vulnerability Scan Summary
DSA-264-1 lxr

Detailed Explanation for this Vulnerability Test

Upstream developers of lxr, a general hypertext cross-referencing
tool, have been alerted of a vulnerability that allows a remote
attacker to read arbitrary files on the host system as user www-data.
This could disclose local files that were not meant to be shared with
the public.
For the stable distribution (woody) this problem has been
fixed in version 0.3-3.
The old stable distribution (potato) is not affected since it does not
contain an lxr package.
For the unstable distribution (sid) this problem has been
fixed in version 0.3-4.
We recommend that you upgrade your lxr package.

Solution :
Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.