FreeBSD 12

FreeBSD 12 — awstats-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — awstats-devel — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 7 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: awstats — arbitrary commands execution vulnerability Related CVEs: CVE-2008-3714 CVE-2008-5080 CVE-2010-4367 Upstream summary: Awstats change log reports: Security fix (Traverse directory of LoadPlugin) Security fix (Limit config to defined directory […]

Read more
FreeBSD 12 — mysql57-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — mysql57-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2015-3194 CVE-2016-0639 CVE-2016-0640 CVE-2016-0641 CVE-2016-0642 CVE-2016-0643 CVE-2016-0644 CVE-2016-0646  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 37 new security patches, plus […]

Read more
FreeBSD 12 — zabbix22-server — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — zabbix22-server — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Zabbix — Remote code execution Related CVEs: CVE-2017-2824 Upstream summary: mitre reports: An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted […]

Read more
FreeBSD 12 — b2evolution — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — b2evolution — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-XML_RPC — remote PHP code injection vulnerability Related CVEs: CVE-2005-2498 Upstream summary: A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP […]

Read more
FreeBSD 12 — firebird21-server — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — firebird21-server — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firebird — Remote Stack Buffer Overflow Related CVEs: CVE-2013-2492 Upstream summary: Firebird Project reports: The FirebirdSQL server is vulnerable to a stack buffer overflow that can be triggered when an […]

Read more
FreeBSD 12 — coppermine — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — coppermine — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: coppermine — Multiple vulnerabilities Related CVEs: CVE-2005-1172 CVE-2006-0872 CVE-2006-0873 CVE-2006-1909 CVE-2007-4976 CVE-2007-4977 CVE-2008-0504 CVE-2008-0505  +3 more Upstream summary: The Coppermine Team reports: The release covers several path disclosure vulnerabilities. If […]

Read more
FreeBSD 12 — imap-uw — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — imap-uw — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: imap-uw — University of Washington IMAP c-client Remote Format String Vulnerability Related CVEs: CVE-2005-0198 CVE-2005-2933 CVE-2008-5514 Upstream summary: SecurityFocus reports: University of Washington IMAP c-client is prone to a remote […]

Read more
FreeBSD 12 — py36-cairosvg — security advisory — patch and remediation guide — diagnosis and fix on FreeBSD 12

FreeBSD 12 — py36-cairosvg — security advisory — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: CairoSVG — Regular Expression Denial of Service vulnerability Upstream summary: CairoSVG security advisories: When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular […]

Read more
CHAT