Bug#497761: cgiwrap: error page XSS vulnerability [CVE-2008-2852]

2008-09-04 Thread Thijs Kinkhorst
Hi Niko, On Thursday 4 September 2008 07:15, Niko Tyni wrote: > I just noticed the CGIWrap upstream homepage at > http://cgiwrap.sourceforge.net/ has this security notice: > > CGIWrap 4.1 update protects against a cross-site scripting vulnerability > in the error page handling due to how some b

Bug#497761: cgiwrap: error page XSS vulnerability [CVE-2008-2852]

2008-09-03 Thread Niko Tyni
Package: cgiwrap Version: 3.9-3.1 Severity: important Tags: security I just noticed the CGIWrap upstream homepage at http://cgiwrap.sourceforge.net/ has this security notice: CGIWrap 4.1 update protects against a cross-site scripting vulnerability in the error page handling due to how some brow