Stay Secure with the Latest Linux Advisories

security advisorycriticaldebian

Debian 7 LTS: DLA-1361-1 Critical: Psensor Directory Traversal Issue

It was discovered that psensor, a server for monitoring hardware sensors remotely, was prone to a directory traversal vulnerability because the create_response function in server/server.c lacks a check for whether a file is under the webserver directory. . Package : psensor Version : 0.6.2.17-2+deb7u1 CVE ID : CVE-2014-10073 Debian Bug : 896195 It was discovered that psensor, a server for monitoring hardware sensors remotely, was prone to a directory traversal vulnerability because the create_response function in server/server.c lacks a check for whether a file is under the webserver directory. For Debian 7 "Wheezy", these problems have been fixed in version 0.6.2.17-2+deb7u1. We recommend that you upgrade your psensor packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Psensor security patch: addresses a critical directory traversal vulnerability in Debian LTS installations impacting remote hardware sensor surveillance.. Psensor Directory Traversal, Debian LTS Update, Remote Sensor Monitoring. . LinuxSecurity.com Team

Apr 24, 2018 Debian LTS