Summary
The remote host is missing an update to spip
announced via advisory DSA 2461-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202461-1
Insight
Several vulnerabilities have been found in SPIP, a website engine for publishing, resulting in cross-site scripting, script code injection and bypass of restrictions.
For the stable distribution (squeeze), this problem has been fixed in version 2.1.1-3squeeze3.
For the testing distribution (wheezy), this problem has been fixed in version 2.1.13-1.
For the unstable distribution (sid), this problem has been fixed in version 2.1.13-1.
We recommend that you upgrade your spip packages.
Severity
Classification
-
CVE CVE-2012-2151 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related Vulnerabilities