🟢 Low ⏱ 5–15 min Last verified: 16 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2688 Upstream summary: SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands […]
🟢 Low ⏱ 5–15 min Last verified: 16 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3438 Upstream summary: libpoe-component-irc-perl before v6.32 does not remove carriage returns and line feeds. This can be used to execute arbitrary IRC commands by passing an argument such […]
🟠 High ⏱ 15–60 min Last verified: 16 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0468 CVE-2003-0540 CVE-2005-0337 CVE-2008-2936 CVE-2008-2937 CVE-2008-3889 CVE-2009-2939 CVE-2011-0411 +3 more Upstream summary: Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos […]
🟢 Low ⏱ 5–15 min Last verified: 15 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-0492 CVE-2018-1000532 Upstream summary: Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 15 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-39880 Upstream summary: A Denial Of Service vulnerability in the apollo_upload_server Ruby gem in GitLab CE/EE all versions starting from 11.9 before 14.0.9, all versions starting from 14.1 […]
🟢 Low ⏱ 5–15 min Last verified: 15 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-4949 Upstream summary: dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to […]
Introduction Deploying manage node.js versions with nvm on debian 12 on a Debian 12 Bookworm machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before […]
🟠 High ⏱ 5–30 min Last verified: 14 December 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 14 December 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2096 CVE-2005-4889 CVE-2006-5466 CVE-2010-2059 CVE-2010-2197 CVE-2010-2198 CVE-2010-2199 CVE-2011-3378 +12 more Upstream summary: zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via […]
Introduction This guide explains how to Configure OpenVAS Vulnerability Scanner on Debian 12 on Debian 12 Bookworm. Debian Bookworm uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 12 install with the […]
