Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Debian: DSA-3030-1 Critical: Mantis SQL Injection Threats Resolved

debian
Calendar Grey September 20, 2014
Scroller Debian
Several vulnerabilities addressed for Mantis; please update your packages to ensure a reliable Debian environment.
Multiple SQL injection vulnerabilities have been discovered in the Mantis bug tracking system
Topics%20covered

Topics Covered

security advisory critical debian sql injection mantis bug tracking

Summary

Multiple SQL injection vulnerabilities have been discovered in the Mantis
bug tracking system.

For the stable distribution (wheezy), these problems have been fixed in
version 1.2.11-1.2+deb7u1.

We recommend that you upgrade your mantis packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: mantis
CVE ID: CVE-2014-1608 CVE-2014-1609

Topics%20covered

Topics Covered

security advisory critical debian sql injection mantis bug tracking

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.