Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Debian Security Advisory DSA 713-1 (junkbuster)
Information
Severity
Severity
Family
Family
CVSSv2 Base
CVSSv2 Base
CVSSv2 Vector
CVSSv2 Vector
Solution Type
Solution Type
Created
Created
Modified
Modified
Summary
The remote host is missing an update to junkbuster announced via advisory DSA 713-1.
Insight
Insight
Several bugs have been found in junkbuster, a HTTP proxy and filter. The Common Vulnerability and Exposures project identifies the following vulnerabilities: CVE-2005-1108 James Ranson discovered that an attacker can modify the referrer setting with a carefully crafted URL by accidentally overwriting a global variable. CVE-2005-1109 Tavis Ormandy from the Gentoo Security Team discovered several heap corruptions due to inconsistent use of an internal function that can crash the daemon or possibly lead to the execution of arbitrary code. For the stable distribution (woody) these problems have been fixed in version 2.0.2-0.2woody1. The unstable distribution (sid) doesn't contain the junkbuster package anymore. We recommend that you upgrade your junkbuster package.
Solution
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20713-1