The remote host is missing an update to webcalendar announced via advisory DSA 766-1. A vulnerability has been discovered in webcalendar, a PHP based multi-user calendar, that can lead to the disclosure of sensitive information to unauthorised parties. the old stable distribution (woody) does not contain the webcalendar package.

For the stable distribution (sarge) this problem has been fixed in version 0.9.45-4sarge1. For the unstable distribution (sid) this problem has been fixed in version 0.9.45-6. We recommend that you upgrade your webcalendar package. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20766-1