|
|
Family: Debian Local Security Checks --> Category: infos
[DSA523] DSA-523-1 www-sql Vulnerability Scan
Vulnerability Scan Summary
DSA-523-1 www-sql
Detailed Explanation for this Vulnerability Test
Ulf Härnhammar discovered a buffer overflow vulnerability in www-sql,
a CGI program which enables the creation of dynamic web pages by
embedding SQL statements in HTML. By exploiting this
vulnerability, a local user could cause the execution of arbitrary
code by creating a web page and processing it with www-sql.
For the current stable distribution (woody), this problem has been
fixed in version 0.5.7-17woody1.
For the unstable distribution (sid), this problem will be fixed soon.
We recommend that you update your www-sql package.
Solution : http://www.debian.org/security/2004/dsa-523
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
