DSA-2223

Executive Summary

Summary
Title	doctrine security update

Informations
Name	DSA-2223	First vendor Publication	2011-04-20
Vendor	Debian	Last vendor Modification	2011-04-20
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

It was discovered that Doctrine, a PHP library for implementing object persistence, contains SQL injection vulnerabilities. (CVE-2011-1522) The exact impact depends on the application which uses the Doctrine library.

For the stable distribution (squeeze), this problem has been fixed in version 1.2.2-2+squeeze1.

We recommend that you upgrade your doctrine packages.

Original Source

Url : http://www.debian.org/security/2011/dsa-2223

CWE : Common Weakness Enumeration

id	Name
CWE-89	Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Doctrine-Project Doctrine cpe:/a:doctrine-project:doctrine:2.0.2 cpe:/a:doctrine-project:doctrine:2.0.1 cpe:/a:doctrine-project:doctrine:2.0.0:rc1 cpe:/a:doctrine-project:doctrine:2.0.0 cpe:/a:doctrine-project:doctrine:2.0.0:alpha2 cpe:/a:doctrine-project:doctrine:2.0.0:rc2 cpe:/a:doctrine-project:doctrine:2.0.0:beta3 cpe:/a:doctrine-project:doctrine:2.0.0:beta4 cpe:/a:doctrine-project:doctrine:2.0.0:alpha1 cpe:/a:doctrine-project:doctrine:2.0.0:alpha4 cpe:/a:doctrine-project:doctrine:2.0.0:alpha3 cpe:/a:doctrine-project:doctrine:2.0.0:beta1 cpe:/a:doctrine-project:doctrine:2.0.0:beta2	13
Application	Doctrine-Project doctrine1.2.0 cpe:/a:doctrine-project:doctrine1.2.0	1
Application	Doctrine-Project doctrine1.2.1 cpe:/a:doctrine-project:doctrine1.2.1	1
Application	Doctrine-Project doctrine1.2.2 cpe:/a:doctrine-project:doctrine1.2.2	1
Application	Doctrine-Project doctrine1.2.3 cpe:/a:doctrine-project:doctrine1.2.3	1