Ticket modified by nils nils at 2009/09/14 13:56
Tracking System: Bugs
Category: Admin
Version: Version 1.6.002
Status: Open
Resolution: None
Completed: 0%
Priority: 5 - medium
Created By: nils nils
Assigned to: Ralf Becker
Summary: #2248 - egroupware segfaults
Original report please see here, and crosspost results if possible, thanks!!
https://bugs.launchpad.net/ubuntu/+source/egroupware/+bug/429294
egroupware segfaulting, see attached apache2 error log…
nils@kfunambol:/var/log/apache2$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu karmic (development branch)
Release: 9.10
Codename: karmic
nils@kfunambol:/var/log/apache2$ dpkg --status egroupware
Package: egroupware
Status: install ok installed
Priority: optional
Section: web
Installed-Size: 40
Maintainer: Ubuntu MOTU Developers
Architecture: all
Version: 1.6.001+dfsg-2
Depends: egroupware-core, egroupware-addressbook, egroupware-bookmarks, egroupware-calendar, egroupware-developer-tools, egroupware-emailadmin, egroupware-etemplate, egroupware-felamimail, egroupware-filemanager, egroupware-infolog, egroupware-manual, egroupware-news-admin, egroupware-notifications, egroupware-phpbrain, egroupware-phpsysinfo, egroupware-polls, egroupware-projectmanager, egroupware-registration, egroupware-resources, egroupware-sambaadmin, egroupware-sitemgr, egroupware-timesheet, egroupware-tracker, egroupware-wiki
Description: web-based groupware suite - metapackage
eGroupWare is a web-based groupware suite. It is a flexible framework
capable of hosting applications such as group calendar, addressbook,
e-mail, accounting, inventory, and more. These applications share a
user store and a flexible access control system to control information
sharing. At the core there is an API for PHP that allows creating new
web-based applications that work within this framework.
.
This package is a metapackage containing dependencies on all the
eGroupWare applications. It can be used to conveniently install
eGroupWare with all available applications.
Original-Maintainer: Peter Eisentraut
Homepage: http://www.egroupware.org/
Comment by nils nils at 2009/09/14 13:56:
More info on possible origins: http://blog.php-security.org/archives/58-Suhosin-caught-another-remote-code-execution-vulnerability.html
Linked entries:
http://www.egroupware.org/egroupware/index.php?menuaction=tracker.tracker_ui.edit&tr_id=2248&no_popup=1