Title : Debian Security Update Fixes Mantis Command Execution Vulnerabilities VUPEN ID : VUPEN/ADV-2005-2518 CVE ID : CVE-2005-3091 - CVE-2005-3335 - CVE-2005-3336 - CVE-2005-3338
Rated as : High Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2005-11-22
Technical Description
Debian has released updated packages to correct multiple vulnerabilities identified in Mantis. These flaws could be exploited by attackers to execute arbitrary commands or conduct SQL injection attacks. For additional information, see : VUPEN/ADV-2005-2221