----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
Debian update for phppgadmin

SECUNIA ADVISORY ID:
SA33263

VERIFY ADVISORY:
http://secunia.com/advisories/33263/

CRITICAL:
Moderately critical

IMPACT:
Cross Site Scripting, Exposure of system information, Exposure of
sensitive information

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 4.0
http://secunia.com/advisories/product/13844/
Debian GNU/Linux unstable alias sid
http://secunia.com/advisories/product/530/

DESCRIPTION:
Debian has issued an update for phppgadmin. This fixes some
vulnerabilities, which can be exploited by malicious people to
conduct cross-site scripting attacks and disclose sensitive
information.

For more information:
SA25446
SA33014

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/p/phppgadmin/phppgadmin_4.0.1.orig.tar.gz
Size/MD5 checksum: 703673 eedac65ce5d73aca2f92388c9766ba1b
http://security.debian.org/pool/updates/main/p/phppgadmin/phppgadmin_4.0.1-3.1etch1.dsc
Size/MD5 checksum: 890 e6dea463d597f6dda40d774820e3bb03
http://security.debian.org/pool/updates/main/p/phppgadmin/phppgadmin_4.0.1-3.1etch1.diff.gz
Size/MD5 checksum: 15678 1cbe0f619e65a8c49894e8c0fe015fb5

Architecture independent packages:

http://security.debian.org/pool/updates/main/p/phppgadmin/phppgadmin_4.0.1-3.1etch1_all.deb
Size/MD5 checksum: 704386 1f5b68f6be269eb3c10646cd8d69c31c

-- Debian GNU/Linux unstable alias sid --

Fixed in version 4.2.1-1.1.

ORIGINAL ADVISORY:
DSA-1693-1:
http://lists.debian.org/debian-security-announce/2008/msg00287.html

OTHER REFERENCES:
SA25446:
http://secunia.com/advisories/25446/

SA33014:
http://secunia.com/advisories/33014/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------