CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
minidlna has SQL Injection that may allow retrieval of arbitrary files
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | kein Fix angegeben |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
Alle 13 Einträge aus 13 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | kein Fix angegeben |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 17.04 | minidlna | 1.1.2+dfsg-1 |
Referenzen
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html
- http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf
- http://www.securityfocus.com/archive/1/527299/30/0
- https://security-tracker.debian.org/tracker/CVE-2013-2738
- https://www.cve.org/CVERecord?id=CVE-2013-2738
- https://www.securityfocus.com/archive/1/527299/30/0