----------------------------------------------------------------------

Want to join the Secunia Security Team?

Secunia offers a position as a security specialist, where your daily
work involves reverse engineering of software and exploit code,
auditing of source code, and analysis of vulnerability reports.

http://secunia.com/secunia_security_specialist/

----------------------------------------------------------------------

TITLE:
Debian update for webcalendar

SECUNIA ADVISORY ID:
SA20542

VERIFY ADVISORY:
http://secunia.com/advisories/20542/

CRITICAL:
Moderately critical

IMPACT:
Security Bypass, Exposure of sensitive information

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 3.1
http://secunia.com/product/5307/
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/

DESCRIPTION:
Debian has issued an update for webcalendar. This fixes a
vulnerability, which can be exploited by malicious people to bypass
certain security restrictions and disclose sensitive information.

For more information:
SA20367

SOLUTION:
Apply updated package.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/w/webcalendar/webcalendar_0.9.45-4sarge5.dsc
Size/MD5 checksum: 608 216c1f9f764169fa877f1717f37dd73a
http://security.debian.org/pool/updates/main/w/webcalendar/webcalendar_0.9.45-4sarge5.diff.gz
Size/MD5 checksum: 12569 3a996902a10791fe764548728885d812
http://security.debian.org/pool/updates/main/w/webcalendar/webcalendar_0.9.45.orig.tar.gz
Size/MD5 checksum: 612360 a6a66dc54cd293429b604fe6da7633a6

Architecture independent components:

http://security.debian.org/pool/updates/main/w/webcalendar/webcalendar_0.9.45-4sarge5_all.deb
Size/MD5 checksum: 629442 f918fe96d26d5cbfa99efe2b2e938d2f

-- Debian GNU/Linux unstable alias sid --

Fixed in version 1.0.4-1.

ORIGINAL ADVISORY:
http://www.us.debian.org/security/2006/dsa-1096

OTHER REFERENCES:
SA20367:
http://secunia.com/advisories/20367/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------