diff options
| author | thierry <thierry@FreeBSD.org> | 2010-09-29 01:30:09 +0800 |
|---|---|---|
| committer | thierry <thierry@FreeBSD.org> | 2010-09-29 01:30:09 +0800 |
| commit | 65e0e66a3d06fbfc1e22dab06fdde939e3239f0e (patch) | |
| tree | 341dcdc9ae6e04649384fca7f733042d69a82f41 /security | |
| parent | d00a8b75da565fe15c379ca840990f8463ed2be0 (diff) | |
| download | freebsd-ports-gnome-65e0e66a3d06fbfc1e22dab06fdde939e3239f0e.tar.gz freebsd-ports-gnome-65e0e66a3d06fbfc1e22dab06fdde939e3239f0e.tar.zst freebsd-ports-gnome-65e0e66a3d06fbfc1e22dab06fdde939e3239f0e.zip | |
Report a XSS vulnerability in mail/horde-imp.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 8c5e896cd9bb..d85aed6ece3d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="6c4db192-cb23-11df-9c1b-0011098ad87f"> + <topic>horde-imp -- XSS vulnerability</topic> + <affects> + <package> + <name>horde-imp</name> + <range><lt>4.3.8,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The Horde team reports:</p> + <blockquote cite="http://article.gmane.org/gmane.comp.horde.announce/516"> + <p>Thanks to Naumann IT Security Consulting for reporting the XSS + vulnerability.</p> + <p>The major changes compared to IMP version H3 (4.3.7) are:</p> + <p>* Fixed an XSS vulnerability in the Fetchmail configuration.</p> + </blockquote> + </body> + </description> + <references> + <url>http://article.gmane.org/gmane.comp.horde.announce/516</url> + <url>http://git.horde.org/diff.php/imp/docs/CHANGES?rt=horde&r1=1.699.2.424&r2=1.699.2.430&ty=h</url> + </references> + <dates> + <discovery>2010-09.28</discovery> + <entry>2010-09-28</entry> + </dates> + </vuln> + <vuln vid="8fc55043-cb1e-11df-9c1b-0011098ad87f"> <topic>horde-base -- XSS and CSRF vulnerabilities</topic> <affects> |