oval:org.mitre.oval:def:11742

Definition Id: oval:org.mitre.oval:def:11742

Oval ID:	oval:org.mitre.oval:def:11742
Title:	DSA-2073 mlmmj -- insufficient input sanitising
Description:	Florian Streibelt reported a directory traversal flaw in the way the Mailing List Managing Made Joyful mailing list manager processed users" requests originating from the administrator web interface without enough input validation. A remote, authenticated attacker could use these flaws to write and/or delete arbitrary files.
Family:	unix	Class:	patch
Reference(s):	DSA-2073 CVE-2009-4896	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	mlmmj
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independent section Installed architecture is all AND Packages section mlmmj-php-web is earlier than 1.2.15-1.1+lenny1 AND mlmmj-php-web-admin is earlier than 1.2.15-1.1+lenny1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND mlmmj is earlier than 1.2.15-1.1+lenny1

Definition Id: oval:org.mitre.oval:def:6513

Oval ID:	oval:org.mitre.oval:def:6513
Title:	Debian GNU/Linux 5.0 is installed
Description:	Debian GNU/Linux 5.0 (lenny) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:5.0	Version:	7
Platform(s):	Debian GNU/Linux 5.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 5.0 is installed
Referenced By:
oval:org.mitre.oval:def:11742