----------------------------------------------------------------------

2003: 2,700 advisories published
2004: 3,100 advisories published
2005: 4,600 advisories published
2006: 5,300 advisories published

How do you know which Secunia advisories are important to you?

The Secunia Vulnerability Intelligence Solutions allows you to filter
and structure all the information you need, so you can address issues
effectively.

Get a free trial of the Secunia Vulnerability Intelligence Solutions:
http://corporate.secunia.com/how_to_buy/38/vi/?ref=secadv

----------------------------------------------------------------------

TITLE:
Debian update for sitebar

SECUNIA ADVISORY ID:
SA28008

VERIFY ADVISORY:
http://secunia.com/advisories/28008/

CRITICAL:
Moderately critical

IMPACT:
Cross Site Scripting, Exposure of sensitive information, System
access

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 3.1
http://secunia.com/product/5307/
Debian GNU/Linux 4.0
http://secunia.com/product/13844/
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/

DESCRIPTION:
Debian has issued an update for sitebar. This fixes some
vulnerabilities, which can be exploited by malicious people to
conduct cross-site scripting attacks, and by malicious users to
disclose potentially sensitive information and compromise a
vulnerable system.

For more information:
SA20841

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.2.6-7.1sarge1.diff.gz
Size/MD5 checksum: 12821 c38ed9e586c8b07b23349588f2be23b2
http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.2.6.orig.tar.gz
Size/MD5 checksum: 333352 a86243f7a70a1a9ac80342fbcca14297
http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.2.6-7.1sarge1.dsc
Size/MD5 checksum: 580 7654849ce1ea822b9b70c52a98def837

Architecture independent packages:

http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.2.6-7.1sarge1_all.deb
Size/MD5 checksum: 341570 6e106cf5dddb0ee63f29efdcf93d8d74


-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.3.8-7etch1.dsc
Size/MD5 checksum: 583 8af7750ff9a808798bf1b898c69b84d6
http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.3.8-7etch1.diff.gz
Size/MD5 checksum: 22552 cdc186193c2ad2d4e69f220dd8372ccd
http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.3.8.orig.tar.gz
Size/MD5 checksum: 686944 fa7b5367808966c8db6241f475f3ef2f

Architecture independent packages:

http://security.debian.org/pool/updates/main/s/sitebar/sitebar_3.3.8-7etch1_all.deb
Size/MD5 checksum: 709524 16eb8791acea7cf1c99ac61b7b47e4b1

-- Debian GNU/Linux unstable alias sid --

Fixed in version 3.3.8-12.1.

ORIGINAL ADVISORY:
http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00204.html

OTHER REFERENCES:
SA20841:
http://secunia.com/advisories/20841/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------