CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
minidlna has SQL Injection that may allow retrieval of arbitrary files
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | düzeltme belirtilmemiş |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
13 kaynaktaki 13 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 11 | minidlna | 1.1.2+dfsg-1 |
| debian 12 | minidlna | 1.1.2+dfsg-1 |
| debian 13 | minidlna | 1.1.2+dfsg-1 |
| debian 14 | minidlna | 1.1.2+dfsg-1 |
| debian 7 | minidlna | düzeltme belirtilmemiş |
| echo | minidlna | 1.1.2+dfsg-1 |
| ubuntu 14.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 15.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.04-ESM | minidlna | 1.1.2+dfsg-1 |
| ubuntu 16.10 | minidlna | 1.1.2+dfsg-1 |
| ubuntu 17.04 | minidlna | 1.1.2+dfsg-1 |
Referanslar
- http://archives.neohapsis.com/archives/bugtraq/2013-07/0100.html
- http://media.blackhat.com/bh-us-12/Briefings/Cutlip/BH_US_12_Cutlip_SQL_Exploitation_WP.pdf
- http://www.securityfocus.com/archive/1/527299/30/0
- https://security-tracker.debian.org/tracker/CVE-2013-2738
- https://www.cve.org/CVERecord?id=CVE-2013-2738
- https://www.securityfocus.com/archive/1/527299/30/0