sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] security fixes: phppgadmin and kadu

From: Ladislav Hagara <ladislav.hagara AT unob.cz>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] security fixes: phppgadmin and kadu
Date: Wed, 20 Jul 2005 13:17:40 +0200

phppgadmin:
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2256

kadu:
A severe vulnerability in the network layer has been fixed, disabling remote malicious code execution.

All phppgadmin and kadu users should upgrade to the latest available versions:
#scribe update
#cast phppgadmin
#cast kadu

--
Source Mage Ledger -> http://ledger.sourcemage.org/

Ladislav Hagara
Source Mage GNU/Linux Developer
http://www.sourcemage.org/

[SM-Security] security fixes: phppgadmin and kadu, Ladislav Hagara, 07/20/2005