forgery

NetBSD Security Advisory 2008-014: Cross-site request forgery in ftpd(8)

Hash: SHA1 [ multiple vendor ftpd - Cross-site request forgery ] Author: Maksymilian Arciemowicz securityreason.com Date: - - Written: 03.09.2008 - - Public: 26.09.2008 SecurityReason Research SecurityAlert Id: ...

The remote FTP server is prone to a cross-site request forgery attack. Description: The remote host is using ProFTPD, a free FTP server for Unix and Linux.

Mandriva has updated libtiff (denial of service) and django (cross-site request forgery).

Slackware has updated php (multiple vulnerabilities).

SUSE has updated ibmjava5 (multiple vulnerabilities).

Ubuntu has updated libxml2 (denial of service).

ProCheckUp Research -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PR08-16: CSRF on Moodle edit profile page Vulnerability found: 25/06/2008 Vendor informed: 28/06/2008 Vulnerability fixed: 16/07/2008 Advisory ...

Hash: SHA1 PR08-16: CSRF on Moodle edit profile page Vulnerability found: 25/06/2008 Vendor informed: 28/06/2008 Vulnerability fixed: 16/07/2008 Advisory publicly released: 22/07/2008 Severity: High ...

A security researcher recently disclosed vulnerability in widely used Linux distributions where attackers can guess cryptographic keys, possibly leading to the forgery of digital signatures and theft of confidential information.

Debian has updated python2.4 (multiple vulnerabilities), mplayer (arbitrary code execution), ikiwiki (cross-site request forgery).

Gentoo has updated cups (arbitrary code execution), DBMail (authentication bypass).