diff options
| author | eik <eik@FreeBSD.org> | 2004-07-06 05:27:12 +0800 |
|---|---|---|
| committer | eik <eik@FreeBSD.org> | 2004-07-06 05:27:12 +0800 |
| commit | 3f54a8ceb26e1372d84e34ef2c72ae95c8e85277 (patch) | |
| tree | 68ba566c54f739837864e5c40b1ebe4f21a66ee1 /security | |
| parent | b45c07f553ec148654a74e4363f326833d00f678 (diff) | |
| download | freebsd-ports-graphics-3f54a8ceb26e1372d84e34ef2c72ae95c8e85277.tar.gz freebsd-ports-graphics-3f54a8ceb26e1372d84e34ef2c72ae95c8e85277.tar.zst freebsd-ports-graphics-3f54a8ceb26e1372d84e34ef2c72ae95c8e85277.zip | |
XSS vulnerability affecting other webmail systems
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 5755e0f0a5b..843eae27de3 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -3824,4 +3824,36 @@ misc.c: <entry>2004-07-02</entry> </dates> </vuln> + + <vuln vid="c5519420-cec2-11d8-8898-000d6111a684"> + <topic>"Content-Type" XSS vulnerability affecting other webmail systems</topic> + <affects> + <package> + <name>openwebmail</name> + <range><le>2.32</le></range> + </package> + <package> + <name>ilohamail</name> + <range><lt>0.8.13</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Roman Medina-Heigl Hernandez did a survey which other webmail systems + where vulnerable to a bug he discovered in SquirrelMail. This advisory + summarizes the results.</p> + </body> + </description> + <references> + <url>http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-2.txt</url> + <url>http://www.freebsd.org/ports/portaudit/89a0de27-bf66-11d8-a252-02e0185c0b53.html</url> + <url>http://www.freebsd.org/ports/portaudit/911f1b19-bd20-11d8-84f9-000bdb1444a4.html</url> + <url>http://www.freebsd.org/ports/portaudit/c3e56efa-c42f-11d8-864c-02e0185c0b53.html</url> + <cvename>CAN-2004-0519</cvename> + </references> + <dates> + <discovery>2004-05-29</discovery> + <entry>2004-07-05</entry> + </dates> + </vuln> </vuxml> |