oval:org.mitre.oval:def:13368

Definition Id: oval:org.mitre.oval:def:13368
 
Oval ID: oval:org.mitre.oval:def:13368
Title: DSA-1990-2 trac-git -- shell command injection
Description: The trac-git package released in DSA-1990-1 had a wrong dependency that could not be satisfied in Debian stable. This update corrects this problem. For reference, the original advisory text is provided below. Stefan Goebel discovered that the Debian version of trac-git, the Git add-on for the Trac issue tracking system, contains a flaw which enables attackers to execute code on the web server running trac-git by sending crafted HTTP queries. The old stable distribution does not contain a trac-git package. For the stable distribution, this problem has been fixed in version 0.0.20080710-3+lenny2. For the unstable distribution and the testing distribution, this problem has been fixed in version 0.0.20090320-1.
Family: unix Class: patch
Reference(s): DSA-1990-2
CVE-2010-0394
Version: 5
Platform(s): Debian GNU/Linux 5.0
Product(s): trac-git
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:6513
 
Oval ID: oval:org.mitre.oval:def:6513
Title: Debian GNU/Linux 5.0 is installed
Description: Debian GNU/Linux 5.0 (lenny) is installed
Family: unix Class: inventory
Reference(s): cpe:/o:debian:debian_gnu/linux:5.0
Version: 7
Platform(s): Debian GNU/Linux 5.0
Product(s):
Definition Synopsis:
Referenced By:
oval:org.mitre.oval:def:13368