Referenciados CVEs:
CVE-2009-1669


Descrição:
\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d Ubuntu Security Notice USN-791-3 24. jun 2009 Smarty vulnerabilidade CVE-2009-1669 \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d Um problema de segurança afeta os seguintes Ubuntu releases: Ubuntu 9/04 Esta assessoria também se aplica às versões correspondentes do Kubuntu, Edubuntu, e Xubuntu. O problema pode ser corrigido por atualizar o sistema para o pacote seguintes versões: Ubuntu 9/04: Smarty 2.6.22-1ubuntu1.1 Em geral, uma atualização do sistema padrão é suficiente para efeitos das mudanças necessárias. Detalhes seguir: Foi descoberto que o Smarty não filtro corretamente certos insumos matemática. Um atacante remoto usando Smarty através de um serviço web poderia explorar essa subconjuntos de shell para executar comandos como o servidor web usuário.





Leia mais ...