Joined: 12 May 2004
|Posted: Thu Nov 08, 2012 11:26 am Post subject: [ GLSA 201211-01 ] MantisBT: Multiple vulnerabilities
|Gentoo Linux Security Advisory
Title: MantisBT: Multiple vulnerabilities (GLSA 201211-01)
Date: November 08, 2012
Bug(s): #348761, #381417, #386153, #407121, #420375
Multiple vulnerabilities have been found in MantisBT, the worst of
which allowing for local file inclusion.
MantisBT is a PHP/MySQL/Web based bugtracking system.
Vulnerable: < 1.2.11
Unaffected: >= 1.2.11
Architectures: All supported architectures
Multiple vulnerabilities have been discovered in MantisBT. Please review
the CVE identifiers referenced below for details.
A remote attacker could exploit these vulnerabilities to conduct
directory traversal attacks, disclose the contents of local files, inject
arbitrary web scripts, obtain sensitive information, bypass
authentication and intended access restrictions, or manipulate bugs and
There is no known workaround at this time.
All MantisBT users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=www-apps/mantisbt-1.2.11"
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum