Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mantis: multiple vulnerabilities

Package(s):

mantis

CVE #(s):

CVE-2008-4687 CVE-2008-4688 CVE-2008-4689

Created:

December 2, 2008

Updated:

December 3, 2008

Description:

The mantis bug tracking system has a few bugs of its own, including a failure to sanitize input parameters, information disclosure, and a failure to unset session cookies on logout.

Alerts:

Gentoo

200812-07

2008-12-02

(Log in to post comments)