----------------------------------------------------------------------

Secunia is proud to announce the availability of the Secunia Software
Inspector.

The Secunia Software Inspector is a free service that detects insecure
versions of software that you may have installed in your system. When
insecure versions are detected, the Secunia Software Inspector also
provides thorough guidelines for updating the software to the latest
secure version from the vendor.

Try it out online:
http://secunia.com/software_inspector/

----------------------------------------------------------------------

TITLE:
Debian update for sql-ledger

SECUNIA ADVISORY ID:
SA23419

VERIFY ADVISORY:
http://secunia.com/advisories/23419/

CRITICAL:
Highly critical

IMPACT:
Hijacking, System access

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 3.1
http://secunia.com/product/5307/
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/

DESCRIPTION:
Debian has issued an update for sql-ledger. This fixes some
vulnerabilities, which can be exploited by malicious people to hijack
user sessions and compromise a vulnerable system.

For more information:
SA21689
SA21886
SA23375

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updates/main/s/sql-ledger/sql-ledger_2.4.7-2sarge1.dsc
Size/MD5 checksum: 655 0392c058e58df7deca105cddb2b40ca5
http://security.debian.org/pool/updates/main/s/sql-ledger/sql-ledger_2.4.7-2sarge1.diff.gz
Size/MD5 checksum: 18423 45d1d70cfa3c385bf74b38bcccbe584c
http://security.debian.org/pool/updates/main/s/sql-ledger/sql-ledger_2.4.7.orig.tar.gz
Size/MD5 checksum: 1695610 04c9ffe49045cad569c5a368d7ebaa76

Architecture independent components:

http://security.debian.org/pool/updates/main/s/sql-ledger/sql-ledger_2.4.7-2sarge1_all.deb
Size/MD5 checksum: 1796848 9cd9a4cf9057efc57384fe952bf4751f

-- Debian GNU/Linux unstable alias sid --

Fixed in version 2.6.21-1.

ORIGINAL ADVISORY:
http://www.us.debian.org/security/2006/dsa-1239

OTHER REFERENCES:
SA21689:
http://secunia.com/advisories/21689/

SA21886:
http://secunia.com/advisories/21886/

SA23375:
http://secunia.com/advisories/23375/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------