Linux Security
    Linux Security
    Linux Security

    Debian: interchange Missing input sanitation

    Date 05 Apr 2004
    Posted By LinuxSecurity Advisories
    This vulnerability can be exploited by an attacker to expose the content of arbitrary variables.
    Debian Security Advisory DSA 471-1                     This email address is being protected from spambots. You need JavaScript enabled to view it.                             Martin Schulze
    April 2nd, 2004                
    - --------------------------------------------------------------------------
    Package        : interchange
    Vulnerability  : missing input sanitising
    Problem-Type   : remote
    Debian-specific: no
    CVE ID         : CAN-2004-0374
    A vulnerability was discovered recently in Interchange, an e-commerce
    and general HTTP database display system.  This vulnerability can be
    exploited by an attacker to expose the content of arbitrary variables.
    An attacker may learn SQL access information for your Interchange
    application and use this information to read and manipulate sensitive
    For the stable distribution (woody) this problem has been fixed in
    For the unstable distribution (sid) this problem has been fixed in
    version 5.0.1-1.
    We recommend that you upgrade your interchange package.
    Upgrade Instructions
    - --------------------
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    Debian GNU/Linux 3.0 alias woody
    - --------------------------------
      Source archives:
          Size/MD5 checksum:      841 94b0e9195fba3134ea48470348c4011a
          Size/MD5 checksum:     1033 3a26a6f4bf24dce7fc38a5a14e8c5f6d
          Size/MD5 checksum:  1858749 660c7e65732a052a81d2ae6e4c6ed2b5
      Architecture independent components:
          Size/MD5 checksum:   636148 6d026419d3b15190084c5132d1f23831
          Size/MD5 checksum:   443894 f92de9f0d14e3eec42e5aa026b0aebb0
      Alpha architecture:
          Size/MD5 checksum:   856628 7cbe87e177b5301b8a4dc65a660b4cb7
          Size/MD5 checksum:    13948 957f5459ba925c58bd8051f57a3a73e5
      ARM architecture:
          Size/MD5 checksum:   855318 d38304316bbe9ea7d4393cd239da5720
          Size/MD5 checksum:    13336 683949f1e2771a3820e7fe022939e0f6
      Intel IA-32 architecture:
          Size/MD5 checksum:   854816 109adbb0c0b312266cbf40f61f069e66
          Size/MD5 checksum:    13290 e0beca510155188aee6fd844194df9c6
      Intel IA-64 architecture:
          Size/MD5 checksum:   858690 0ab2a74ee31c14fa5d13b18cecffc511
          Size/MD5 checksum:    15810 221b180c0ee922bb6b52bbfa18a9da45
      HP Precision architecture:
          Size/MD5 checksum:   856400 e3d30cc487ddb668fb12e58a3015e233
          Size/MD5 checksum:    14050 3b75f8a9a1c1cac6696b3d1a6b08f890
      Motorola 680x0 architecture:
          Size/MD5 checksum:   855446 5cd7687a310f7f7d31c4ccc531f71728
          Size/MD5 checksum:    13298 c7bcc87f7942cdaa629a845a4b7f2235
      Big endian MIPS architecture:
          Size/MD5 checksum:   856194 f8ff381f65390d33405edf0c2ae621e8
          Size/MD5 checksum:    13372 60cad3c65165d107113cb0753ee8c94d
      Little endian MIPS architecture:
          Size/MD5 checksum:   856134 bd1274309cff939e3b9adce8e29e3349
          Size/MD5 checksum:    13388 7703855991403f9464c93a4250df13d4
      PowerPC architecture:
          Size/MD5 checksum:   855548 14d5d8074d0b018a90b20053544767a5
          Size/MD5 checksum:    13270 3dbc5939e4069e95dc0d5e55e87322cc
      IBM S/390 architecture:
          Size/MD5 checksum:   855872 ca6ec24a4760fcb83b7313a2e3e5aa15
          Size/MD5 checksum:    13568 cfa8f946a9fcb65870c8245afe84b75d
      Sun Sparc architecture:
          Size/MD5 checksum:   858448 00048ba18cc57fa5dbaa1356efccca52
          Size/MD5 checksum:    13402 dfea5e9879849be66d83f3c4796c888c
      These files will probably be moved into the stable distribution on
      its next update.
    - ---------------------------------------------------------------------------------
    For apt-get: deb stable/updates main
    For dpkg-ftp: dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and

    LinuxSecurity Poll

    'Tis the season of giving! How have you given back to the open-source community?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    [{"id":"171","title":"I've contributed to the development of an open-source project.","votes":"15","type":"x","order":"1","pct":36.59,"resources":[]},{"id":"172","title":"I've reviewed open-source code for security bugs.","votes":"8","type":"x","order":"2","pct":19.51,"resources":[]},{"id":"173","title":"I've made a donation to an open-source project.","votes":"18","type":"x","order":"3","pct":43.9,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

    Please vote first in order to view vote results.


    bottom 200

    Please enable / Bitte aktiviere JavaScript!
    Veuillez activer / Por favor activa el Javascript![ ? ]

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.