There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass
    restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set methods.
    (CVE-2008-1475)

- Fri Oct 3 2008 Paul P. Komkoff Jr - 1.4.6-1

 - new upstream version

 - Fri Mar 7 2008 Paul P. Komkoff Jr - 1.4.4-1

 - new upstream version with security fixes (bz#436546)

 - Wed Feb 20 2008 Paul P. Komkoff Jr - 1.4.1-2

 - new upstream version

 - Wed Jan 23 2008 Paul P. Komkoff Jr - 1.4.1-1

 - new upstream version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fri Oct 3 2008 Paul P. Komkoff Jr - 1.4.6-1

 - new upstream version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fri Mar 7 2008 Paul P. Komkoff Jr - 1.4.4-1

 - new upstream version with security fixes (bz#436546)

 - Wed Feb 20 2008 Paul P. Komkoff Jr - 1.4.1-2

 - new upstream version

 - Wed Jan 23 2008 Paul P. Komkoff Jr - 1.4.1-1

 - new upstream version

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200805-21 (Roundup: Permission bypass)

    Philipp Gortan reported that the xml-rpc server in Roundup does not     check property permissions (CVE-2008-1475). Furthermore, Roland Meister     discovered multiple vulnerabilities caused by unspecified errors, some     of which may be related to cross-site scripting (CVE-2008-1474).
  Impact :

    A remote attacker could possibly exploit the first vulnerability to     edit or view restricted properties via the list(), display(), and set()     methods. The impact and attack vectors of the second vulnerability are     unknown.
  Workaround :

    There is no known workaround at this time.

- Bug #436546 - Roundup 1.4.4 contains some sekrit     security fixes

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
432977	SCA: security update for roundup (GHSA-j59j-h3g7-cpmf)	Tenable Cloud Security	SCA Checks	2025/8/11	2026/7/2	critical
432977	SCA: security update for roundup (GHSA-j59j-h3g7-cpmf)	Tenable Self-Hosted Container Security	SCA Checks	2025/8/11	2026/7/2	critical
34827	Fedora 8 : roundup-1.4.6-1.fc8 (2008-9712)	Nessus	Fedora Local Security Checks	2008/11/21	2021/1/11	medium
34832	Fedora 9 : roundup-1.4.6-1.fc9 (2008-9734)	Nessus	Fedora Local Security Checks	2008/11/21	2021/1/11	medium
31435	Fedora 8 : roundup-1.4.4-1.fc8 (2008-2471)	Nessus	Fedora Local Security Checks	2008/3/13	2021/1/11	medium
32450	GLSA-200805-21 : Roundup: Permission bypass	Nessus	Gentoo Local Security Checks	2008/5/28	2021/1/6	medium
31430	Fedora 7 : roundup-1.4.4-1.fc7 (2008-2370)	Nessus	Fedora Local Security Checks	2008/3/13	2021/1/11	medium

检测

插件搜索

critical

critical

medium

medium

medium

medium

medium