Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

Gentoo: GLSA-200711-05 Critical: SiteBar Code Execution Risk

gentoo
Calendar Grey November 6, 2007
Scroller Gentoo
Several vulnerabilities in SiteBar may permit unauthorized code execution and exposure of files. Prompt updates are advised.
Multiple issues have been identified in SiteBar that might allow execution of arbitrary code and arbitrary file disclosure.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-05
                                            https://security.gentoo.org/

  Severity: High
     Title: SiteBar: Multiple issues
      Date: November 06, 2007
      Bugs: #195810
        ID: 200711-05


Synopsis
=======
Multiple issues have been identified in SiteBar that might allow
execution of arbitrary code and arbitrary file disclosure.

Background
=========
SiteBar is a PHP application that allows users to store their bookmarks
on a web server.

Affected packages
================
    -------------------------------------------------------------------
     Package           /  Vulnerable  /                     Unaffected
    -------------------------------------------------------------------
  1  www-apps/sitebar       < 3.3.9                           >= 3.3.9

==========
Tim Brown discovered these multiple issues: the translation module does
not properly sanitize the...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory high severity gentoo code execution file disclosure sitebar

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory high severity gentoo code execution file disclosure sitebar

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround