Alerts This Week
Warning Icon 1 562
Alerts This Week
Warning Icon 1 562

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -7 articles for you...
172

Ubuntu 12.04 LTS: USN-1444-1 High: BackupPC Cross-Site Scripting

BackupPC could be made to expose sensitive information over the network.. =========================================================================Ubuntu Security Notice USN-1444-1 May 17, 2012 backuppc vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS - Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.04 LTS - Ubuntu 8.04 LTS Summary: BackupPC could be made to expose sensitive information over the network. Software Description: - backuppc: high-performance, enterprise-grade system for backing up PCs Details: It was discovered that BackupPC did not properly sanitize its input when processing RestoreFile error messages, resulting in a cross-site scripting (XSS) vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: backuppc 3.2.1-2ubuntu1.1 Ubuntu 11.10: backuppc 3.2.1-1ubuntu1.2 Ubuntu 11.04: backuppc 3.2.0-3ubuntu4.3 Ubuntu 10.04 LTS: backuppc 3.1.0-9ubuntu1.3 Ubuntu 8.04 LTS: backuppc 3.0.0-4ubuntu1.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-1444-1 CVE-2011-5081 Package Information: https://launchpad.net/ubuntu/+source/backuppc/3.2.1-2ubuntu1.1 https://launchpad.net/ubuntu/+source/backuppc/3.2.1-1ubuntu1.2 https://launchpad.net/ubuntu/+source/backuppc/3.2.0-3ubuntu4.3 https://launchpad.net/ubuntu/+source/backuppc/3.1.0-9ubuntu1.3 https://launchpad.net/ubuntu/+source/backuppc/3.0.0-4ubuntu1.4 . Ubuntu Security Announcement USN-1444-2 addresses a vulnerability in BackupPC that might leak confidential information over the network, necessitating immediate system upgrades.. BackupPC Vulnerability, Cross-Site Scripting Threat, Ubuntu Security Notice, Data Exposure. . LinuxSecurity.com Team

Calendar 2 May 17, 2012 Ubuntu
172

Ubuntu: 843-1 Critical: BackupPC Unauthorized Access Exploit

It was discovered that BackupPC did not restrict normal users from setting the ClientNameAlias parameter. An authenticated user could exploit this to gain access to unauthorized hosts. This update fixed the issue by preventing normal users from modifying the ClientNameAlias configuration parameter. [More...]. ==========================================================Ubuntu Security Notice USN-843-1 October 06, 2009 backuppc vulnerability CVE-2009-3369 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 8.04 LTS Ubuntu 8.10 Ubuntu 9.04 This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.04 LTS: backuppc 3.0.0-4ubuntu1.1 Ubuntu 8.10: backuppc 3.1.0-3ubuntu2.1 Ubuntu 9.04: backuppc 3.1.0-4ubuntu1.1 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: It was discovered that BackupPC did not restrict normal users from setting the ClientNameAlias parameter. An authenticated user could exploit this to gain access to unauthorized hosts. This update fixed the issue by preventing normal users from modifying the ClientNameAlias configuration parameter. Updated packages for Ubuntu 8.04 LTS: Source archives: Size/MD5: 21923 9900a0a3545140aa8dfa99c82325c2a6 Size/MD5: 725 b95b75a4b08f5d51b0cc498e3b11abd5 Size/MD5: 432200 dc37728c1dc9225354523f279045f3f3 Architecture independent packages: Size/MD5: 491322 b09233c28365bca07e7589cde9e70f29 Updated packages for Ubuntu 8.10: Source archives: Size/MD5: 24091 e9caaf9693e4222226e523d383844cfd Size/MD5: 1123 655eb9b56a61072ee29f5c12096c1cbb Size/MD5: 47498184b4471852ef910768eae9963ef932d2 Architecture independent packages: Size/MD5: 537934 8ba6638c0e0c971db6c0b5a8635cd54e Updated packages for Ubuntu 9.04: Source archives: Size/MD5: 27074 395e09fdee61feb651812c68d447e1c7 Size/MD5: 1123 b71592b894e37a3e08a42f13b0884f2c Size/MD5: 474981 84b4471852ef910768eae9963ef932d2 Architecture independent packages: Size/MD5: 540222 b52db5cf3ec5b95fa34eeff76046e318 . Urgent patch for BackupPC on Ubuntu needed to block security breaches via ClientNameAlias. Swift response essential.. BackupPC Security, Ubuntu Security Update, Unauthorized Access, Backup Configuration, Security Advisory. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Oct 06, 2009 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here