The OVAL Repository5.52015-09-03T07:02:19.442-04:00mono-web ASP.net sourcecode disclosureopenSUSE 10.2SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10bytefx-data-mysqlibm-data-db2mono-basicmono-coremono-core-32bitmono-datamono-data-firebirdmono-data-oraclemono-data-postgresqlmono-data-sqlitemono-data-sybasemono-develmono-extrasmono-jscriptmono-locale-extrasmono-nunitmono-webmono-winformsThe System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to (1) read source code by appending a space (%20) to a URI, and (2) read credentials via a request for Web.Config%20.Thomas R. JonesDRAFTINTERIMACCEPTEDNicholas HansenINTERIMNicholas HansenNicholas HansenJeff ChengJeff ChengJeff ChengACCEPTEDACCEPTEDcpe://novell:opensuse:10.2cpe://novell:suse_linux:10.1cpe://novell:suse_linux_enterprise:10:desktopcpe://novell:suse_linux_enterprise:10:servercpe:///novell:bytefx-data-mysqlcpe:///novell:ibm-data-db2cpe:///novell:mono-basiccpe:///novell:mono-corecpe:///novell:mono-core-32bitcpe:///novell:mono-datacpe:///novell:mono-data-firebirdcpe:///novell:mono-data-oraclecpe:///novell:mono-data-postgresqlcpe:///novell:mono-data-sqlitecpe:///novell:mono-data-sybasecpe:///novell:mono-develcpe:///novell:mono-extrascpe:///novell:mono-jscriptcpe:///novell:mono-locale-extrascpe:///novell:mono-nunitcpe:///novell:mono-webcpe:///novell:mono-winformsPackage mono-basic is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10Package mono-basic is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopPackage ibm-data-db2 is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10Package ibm-data-db2 is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopPackage bytefx-data-mysql is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10Package bytefx-data-mysql is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopPackage mono-data-postgresql is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-data-postgresql is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-data-oracle is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-data-oracle is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-jscript is installedopenSUSE 10.2SUSE Linux 10.1Package mono-jscript is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.1Package mono-data-firebird is installedopenSUSE 10.2SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-data-firebird is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-extras is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10Package mono-extras is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopSUSE Linux 10.1 is installedSUSE Linux 10.1SUSE Linux 10.1 is installed.Thomas R. JonesDRAFTJonathan BakerINTERIMACCEPTEDNicholas HansenINTERIMACCEPTEDChandan SINTERIMACCEPTEDACCEPTEDPackage mono-data-sqlite is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-data-sqlite is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-winforms is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10Package mono-winforms is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopPackage mono-nunit is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-nunit is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverSUSE Linux Enterprise Desktop 10 is installedSUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Desktop 10 is installed.Thomas R. JonesDRAFTJonathan BakerINTERIMACCEPTEDNicholas HansenINTERIMACCEPTEDChandan SINTERIMACCEPTEDEvgeniy PavlovINTERIMACCEPTEDMaria MikhnoINTERIMACCEPTEDACCEPTEDPackage mono-locale-extras is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-locale-extras is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-devel is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10Package mono-devel is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopPackage mono-data-sybase is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-data-sybase is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-data is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-data is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-core is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-core is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverPackage mono-web is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1SUSE Linux Enterprise Desktop 10SUSE Linux Enterprise Server 10Package mono-web is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1cpe:/o:novell:suse_linux_enterprise:10::desktopcpe:/o:novell:suse_linux_enterprise:10::serverSUSE Linux Enterprise Server 10 is installedSUSE Linux Enterprise Server 10SUSE Linux Enterprise Server 10 is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDNicholas HansenINTERIMACCEPTEDEvgeniy PavlovINTERIMACCEPTEDMaria MikhnoINTERIMACCEPTEDACCEPTEDcpe:/o:novell:suse_linux:10:serverPackage mono-core-32bit is installedopenSUSE 10.2SUSE Linux 10.0SUSE Linux 10.1Package mono-core-32bit is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2cpe:/o:novell:suse_linux:10.0cpe:/o:novell:suse_linux:10.1openSUSE 10.2 is installedopenSUSE 10.2openSUSE 10.2 is installed.Thomas R. JonesDRAFTINTERIMACCEPTEDNicholas HansenINTERIMACCEPTEDACCEPTEDcpe:/o:novell:opensuse:10.2suse-releasesled-releasesles-releaseopenSUSE-releasemono-extrasmono-datamono-develmono-coreibm-data-db2mono-jscriptmono-winformsmono-core-32bitmono-locale-extrasmono-data-oraclemono-data-postgresqlmono-data-sqlitemono-webmono-data-sybasemono-basicmono-data-firebirdmono-nunitbytefx-data-mysql(^i586$)|(^x86_64$)|(^ppc$)(none)10.1a84edae89c800aca^(i586$)|(x86_64$)$(none)10(^i586$)|(^x86_64$)|(^ppc$)(none)10.2a84edae89c800acappc(^i586$)|(^x86_64$)|(^ppc$)|(^noarch$)(none)a84edae89c800acax86_64(none)a84edae89c800aca0:1.1.18.1-12.20:1.1.18-9.10:1.1.13.8-2.15(^i586$)|(^x86_64$)|(^ppc$)(none)a84edae89c800aca^i[3-6]86$x86_64