Oval Definition:oval:org.mitre.oval:def:13821
Revision Date:2014-06-23Version:20
Title:DSA-1848-1 znc -- directory traversal
Description:It was discovered that znc, an IRC proxy, did not properly process certain DCC requests, allowing attackers to upload arbitrary files. For the old stable distribution, this problem has been fixed in version 0.045-3+etch3. For the stable distribution, this problem has been fixed in version 0.058-2+lenny3. For the unstable distribution, this problem has been fixed in version 0.074-1. We recommend that you upgrade your znc package.
Family:unixClass:patch
Status:ACCEPTEDReference(s):DSA-1848-1
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):znc
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND znc DPKG is earlier than 0.058-2+lenny3
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND znc DPKG is earlier than 0.045-3+etch3
  • BACK