htdig: cross site scripting [LWN.net]

Package(s):

htdig

CVE #(s):

CAN-2005-0085

Created:

February 14, 2005

Updated:

January 10, 2006

Description:

Michael Krax discovered that ht://Dig fails to validate the 'config' parameter before displaying an error message containing the parameter. This flaw could allow an attacker to conduct cross-site scripting attacks.

Alerts:

Fedora-Legacy	FLSA:152907	2006-01-09
Mandrake	MDKSA-2005:063	2005-03-31
Red Hat	RHSA-2005:090-01	2005-02-15
Debian	DSA-680-1	2005-02-14
Gentoo	200502-16	2005-02-13

(Log in to post comments)