*** This bug is a security vulnerability ***
Public security bug reported:
Binary package hint: namazu2
"Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before
2.0.18 allows remote attackers to inject arbitrary web script or HTML
via UTF-7 encoded input, related to failure to set the charset, a
different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of
these details are obtained from third party information."
** Affects: namazu2 (Ubuntu)
Importance: Undecided
Status: Confirmed
** Affects: namazu2 (Ubuntu Dapper)
Importance: Undecided
Status: Confirmed
** Affects: namazu2 (Ubuntu Edgy)
Importance: Undecided
Status: Confirmed
** Affects: namazu2 (Ubuntu Feisty)
Importance: Undecided
Status: Confirmed
** Affects: namazu2 (Ubuntu Gutsy)
Importance: Undecided
Status: Confirmed
** Affects: namazu2 (Ubuntu Hardy)
Importance: Undecided
Status: Confirmed
** Affects: namazu2 (Debian)
Importance: Unknown
Status: Unknown
** Visibility changed to: Public
** Changed in: namazu2 (Ubuntu Dapper)
Status: New => Confirmed
** Changed in: namazu2 (Ubuntu Edgy)
Status: New => Confirmed
** Changed in: namazu2 (Ubuntu Feisty)
Status: New => Confirmed
** Changed in: namazu2 (Ubuntu Gutsy)
Status: New => Confirmed
** Changed in: namazu2 (Ubuntu Hardy)
Status: New => Confirmed
** Bug watch added: Debian Bug tracker #472644
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=472644
** Also affects: namazu2 (Debian) via
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=472644
Importance: Unknown
Status: Unknown
--
[CVE-2008-1468] XSS vulnerability via UTF-7 encoded input
https://bugs.launchpad.net/bugs/212196
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
