-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Package : spip Version : 2.1.17-1+deb7u6 CVE ID : CVE-2016-7980 CVE-2016-7981 CVE-2016-7982 CVE-2016-7998 CVE-2016-7999
Multiple vulnerabilities have been discovered in SPIP, a website engine for publishing written in PHP. CVE-2016-7980 Nicolas Chatelain of Sysdream Labs discovered a cross-site request forgery (CSRF) vulnerability in the valider_xml action of SPIP. This allows remote attackers to make use of potential additional vulnerabilities such as the one described in CVE-2016-7998. CVE-2016-7981 Nicolas Chatelain of Sysdream Labs discovered a reflected cross-site scripting attack (XSS) vulnerability in the validater_xml action of SPIP. An attacker could take advantage of this vulnerability to inject arbitrary code by tricking an administrator to open a malicious link. CVE-2016-7982 Nicolas Chatelain of Sysdream Labs discovered a file enumeration / path traversal attack in the the validator_xml action of SPIP. An attacker could use this to enumerate files in an arbitrary directory on the file system. CVE-2016-7998 Nicolas Chatelain of Sysdream Labs discovered a possible PHP code execution vulnerability in the template compiler/composer function of SPIP. In combination with the XSS and CSRF vulnerabilities described in this advisory, a remote attacker could take advantage of this to execute arbitrary PHP code on the server. CVE-2016-7999 Nicolas Chatelain of Sysdream Labs discovered a server side request forgery in the valider_xml action of SPIP. Attackers could take advantage of this vulnerability to send HTTP or FTP requests to remote servers that they don't have direct access to, possibly bypassing access controls such as a firewall. For Debian 7 "Wheezy", these problems have been fixed in version 2.1.17-1+deb7u6. We recommend that you upgrade your spip packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS - -- Jonas Meurer -----BEGIN PGP SIGNATURE----- iQItBAEBCAAXBQJYGmHXEBxtZWpvQGRlYmlhbi5vcmcACgkQUmLn/0kQSf7ijw// QnOplqpjFiV8t7kSRRaAylrNOPOScodU/P/YwuFdRhIlqMK68m4M8NYR00ctkjGf dqCLli5TkMyhnZ5H8ww9M3RTMhpf5T5UdxLc2MZ8BT5hPrGUoCRI/2u5MLKL46QL KDx9PkYN+7S/CDsOTKJcx6zY1mJqHJQ1r3rOu5Oz9ji0/Pmvz8oNBpPg05gdSovB PGQOsQUl32wE5Wb2GIMsplDUaA+Z1SySU0cEetaHVuE6a/m9L7WA+KMvu/Ks6DvS M7eFxrmdtvoHdppUKkGXt1LIr71/Wd0EgIouW1YpwbK2lu4lPlWlmTkD1hr8c63Y UKL6Ro/p6fHTsjdNfDftN6hmmbhKgkxPhMIq5f4/VQqN66T4Gj7aDIVfhNB1FUAA WlDr28OuXGYNr9L1x+TW4aR0Cz+YnPtQy3yBmw0ZFC9n/8hcJWStbPGgf32OMvq9 p/cChdXi1TxdzeVOaNDn/w5nU08xpOwohOSQwa7tdbCvXJTtN78dEvegE5hUK8wH tdavrPGCHefkJHZt/qYXlJUnuVU7hpWw5P6EbgjEYcZbQQupel6OEaBM8IHeGIGB 8Zj2pNUnIqlz79lZ7a5fDz4byJuaVVU/KD3yHmvKE/XYJ3BHpY8ooK1fIOxLw1fW URvYRtwLjaWSYc8RQ1EP5ZRzEMN0ee4nELFiCyKL2qU= =vpcq -----END PGP SIGNATURE-----