Home→Descriptions→SA38497
| Secunia ID | |
| Release Date |
09 Feb 2010 |
| Criticality | |
| Solution Status |
Vendor Patch |
| Where | |
| Impact |
Exposure of sensitive informationVulnerabilities where documents or credentials are leaked or can be revealed either locally or from remote. Manipulation of dataThis includes vulnerabilities where a user or a remote attacker can manipulate local data on a system, but not necessarily be able to gain escalated privileges or system access. The most frequent type of vulnerabilities with this impact are SQL-injection vulnerabilities, where a malicious user or person can manipulate SQL queries. |
| Description |
Fedora has issued an update for ocsinventory. This fixes multiple vulnerabilities, which can be exploited by malicious users to conduct SQL injection attacks. For more information see vulnerability #2 in: |
| Solution |
Apply updated packages via the yum utility ("yum update ocsinventory"). |
| Original Advisory |
FEDORA-2010-1535: FEDORA-2010-1540: |