The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set methods.

- Fri Oct 3 2008 Paul P. Komkoff Jr - 1.4.6-1

 - new upstream version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fri Oct 3 2008 Paul P. Komkoff Jr - 1.4.6-1

 - new upstream version

 - Fri Mar 7 2008 Paul P. Komkoff Jr - 1.4.4-1

 - new upstream version with security fixes (bz#436546)

 - Wed Feb 20 2008 Paul P. Komkoff Jr - 1.4.1-2

 - new upstream version

 - Wed Jan 23 2008 Paul P. Komkoff Jr - 1.4.1-1

 - new upstream version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200805-21 (Roundup: Permission bypass)

    Philipp Gortan reported that the xml-rpc server in Roundup does not     check property permissions (CVE-2008-1475). Furthermore, Roland Meister     discovered multiple vulnerabilities caused by unspecified errors, some     of which may be related to cross-site scripting (CVE-2008-1474).
  Impact :

    A remote attacker could possibly exploit the first vulnerability to     edit or view restricted properties via the list(), display(), and set()     methods. The impact and attack vectors of the second vulnerability are     unknown.
  Workaround :

    There is no known workaround at this time.

- Fri Mar 7 2008 Paul P. Komkoff Jr - 1.4.4-1

 - new upstream version with security fixes (bz#436546)

 - Wed Feb 20 2008 Paul P. Komkoff Jr - 1.4.1-2

 - new upstream version

 - Wed Jan 23 2008 Paul P. Komkoff Jr - 1.4.1-1

 - new upstream version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Bug #436546 - Roundup 1.4.4 contains some sekrit     security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
34832	Fedora 9 : roundup-1.4.6-1.fc9 (2008-9734)	Nessus	Fedora Local Security Checks	medium
34827	Fedora 8 : roundup-1.4.6-1.fc8 (2008-9712)	Nessus	Fedora Local Security Checks	medium
32450	GLSA-200805-21 : Roundup: Permission bypass	Nessus	Gentoo Local Security Checks	medium
31435	Fedora 8 : roundup-1.4.4-1.fc8 (2008-2471)	Nessus	Fedora Local Security Checks	medium
31430	Fedora 7 : roundup-1.4.4-1.fc7 (2008-2370)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2008-1475

critical

Tenable Plugins

medium

medium

medium

medium

medium