CVE-2009-1669

Related Files

Debian Linux Security Advisory 1919-2

Posted Aug 18, 2010

Authored by Debian | Site debian.org

Debian Linux Security Advisory 1919-2 - A regression was found in the patch applied in DSA 1919-1 to smarty, which caused compilation failures on some specific templates. This update corrects the fix.

tags | advisory

systems | linux, debian

advisories | CVE-2008-4810, CVE-2009-1669

SHA-256 | cb15832ad1e5a0fc8cf55182048515496dda0b3610caf1d848c736189b09c66f

Download | Favorite | View

Gentoo Linux Security Advisory 201006-13

Posted Jun 3, 2010

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201006-13 - Multiple vulnerabilities in the Smarty template engine might allow remote attackers to execute arbitrary PHP code. Versions less than 2.6.23 are affected.

tags | advisory, remote, arbitrary, php, vulnerability

systems | linux, gentoo

advisories | CVE-2008-1066, CVE-2008-4810, CVE-2008-4811, CVE-2009-1669

SHA-256 | 0f96060e48a38b2da707c8d1b4e248c7349ea838ebce02cad25d161a76115684

Download | Favorite | View

Debian Linux Security Advisory 1919-1

Posted Oct 26, 2009

Authored by Debian | Site debian.org

Debian Linux Security Advisory 1919-1 - Several remote vulnerabilities have been discovered in Smarty, a PHP templating engine.

tags | advisory, remote, php, vulnerability

systems | linux, debian

advisories | CVE-2008-4810, CVE-2009-1669

SHA-256 | e81d5c75010f479d4b00e96bf9841a9e460fd58089ab86927076c5b5f3212808

Download | Favorite | View

Ubuntu Security Notice 791-3

Posted Jun 25, 2009

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice USN-791-3 - It was discovered that Smarty did not correctly filter certain math inputs. A remote attacker using Smarty via a web service could exploit this to execute subsets of shell commands as the web server user.

tags | advisory, remote, web, shell

systems | linux, ubuntu

advisories | CVE-2009-1669

SHA-256 | 50ab743350ae3ce592b5af8df39209875ef6d9093bc8ecaed63b68eb7ef24e34

Download | Favorite | View

Ubuntu Security Notice 791-1

Posted Jun 25, 2009

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice USN-791-1 - A large amount of Moodle vulnerabilities have been addressed including code execution, SQL injection, and cross site request forgery issues.

tags | advisory, vulnerability, code execution, sql injection, csrf

systems | linux, ubuntu

advisories | CVE-2007-3215, CVE-2008-4796, CVE-2008-4810, CVE-2008-4811, CVE-2008-5153, CVE-2008-5432, CVE-2008-5619, CVE-2008-6124, CVE-2009-0499, CVE-2009-0500, CVE-2009-0501, CVE-2009-0502, CVE-2009-1171, CVE-2009-1669

SHA-256 | 64eba19d281ac935355625ea75f3a8d85a741d8ad8b8abd7435d68842a28d061

Download | Favorite | View