Nessus Plugin #15308

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

[DSA471] DSA-471-1 interchange

Family:

Debian Local Security Checks

Category:

infos

Copyright:

This script is (C) 2004 Michel Arboi

Summary:

DSA-471-1 interchange

Version:

$Revision: 1.4 $

Cve_id:

CAN-2004-0374

Bugtraq_id:

10005

Xrefs:

DSA:471

Description:

A vulnerability was discovered recently in Interchange, an e-commerce
and general HTTP database display system. This vulnerability can be
exploited by an attacker to expose the content of arbitrary variables.
An attacker may learn SQL access information for your Interchange
application and use this information to read and manipulate sensitive
data.
For the stable distribution (woody) this problem has been fixed in
version 4.8.3.20020306-1.woody.2.
For the unstable distribution (sid) this problem has been fixed in
version 5.0.1-1.
We recommend that you upgrade your interchange package.


Solution : http://www.debian.org/security/2004/dsa-471
Risk factor : High