Attachment 158993 Details for Bug 201702 – security/vuxml for < cacti-0.8.8e

[patch] security/vuxml for < cacti-0.8.8e

cacti_vuxml.diff (text/plain), 1.91 KB, created by Jason Unovitch on 2015-07-20 00:15:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jason Unovitch

Created: 2015-07-20 00:15:01 UTC

Size: 1.91 KB

patch

obsolete

>Index: vuln.xml
>===================================================================
>--- vuln.xml	(revision 392536)
>+++ vuln.xml	(working copy)
>@@ -58,6 +58,50 @@
> 
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+ <vuln vid="0bfda05f-2e6f-11e5-a4a5-002590263bf5">
>+ <topic>cacti -- Multiple XSS and SQL injection vulnerabilities</topic>
>+ <affects>
>+ <package>
>+	<name>cacti</name>
>+	<range><lt>0.8.8e</lt></range>
>+ </package>
>+ </affects>
>+ <description>
>+ <body xmlns="http://www.w3.org/1999/xhtml">
>+	The Cacti Group, Inc. reports:
>+	<blockquote cite="http://www.cacti.net/release_notes_0_8_8e.php">
>+	 Important Security Fixes
>+	 <ul>
>+	 <li>Multiple XSS and SQL injection vulnerabilities</li>
>+	 <li>CVE-2015-4634 - SQL injection in graphs.php</li>
>+	 </ul>
>+	 Changelog
>+	 <ul>
>+	 <li>bug: Fixed various SQL Injection vectors</li>
>+	 <li>bug#0002574: SQL Injection Vulnerabilities in graph items and
>+	 graph template items</li>
>+	 <li>bug#0002577: CVE-2015-4634 - SQL injection in graphs.php</li>
>+	 <li>bug#0002579: SQL Injection Vulnerabilities in data sources</li>
>+	 <li>bug#0002580: SQL Injection in cdef.php</li>
>+	 <li>bug#0002582: SQL Injection in data_templates.php</li>
>+	 <li>bug#0002583: SQL Injection in graph_templates.php</li>
>+	 <li>bug#0002584: SQL Injection in host_templates.php</li>
>+	 </ul>
>+	</blockquote>
>+ </body>
>+ </description>
>+ <references>
>+ <cvename>CVE-2015-4634</cvename>
>+ <freebsdpr>ports/201702</freebsdpr>
>+ <url>http://www.cacti.net/release_notes_0_8_8e.php</url>
>+ <mlist>http://seclists.org/oss-sec/2015/q3/150</mlist>
>+ </references>
>+ <dates>
>+ <discovery>2015-07-12</discovery>
>+ <entry>2015-07-20</entry>
>+ </dates>
>+ </vuln>
>+
> <vuln vid="8b1f53f3-2da5-11e5-86ff-14dae9d210b8">
> <topic>php-phar -- multiple vulnerabilities</topic>
> <affects>

Flags:

junovitch: maintainer-approval? (ports-secteam)

Actions: View | Diff

Attachments on bug 201702: 158992 | 158993 | 158998 | 159015 | 159053 | 159054