diff options
| author | Jimmy Olgeni <olgeni@FreeBSD.org> | 2012-11-02 18:08:19 +0000 |
|---|---|---|
| committer | Jimmy Olgeni <olgeni@FreeBSD.org> | 2012-11-02 18:08:19 +0000 |
| commit | 3ec23a27f584e8d01cd996f2ef8d2bda069099d2 (patch) | |
| tree | 9949a94525f6f501b4bc7fab60915e805f637289 | |
| parent | - Update MASTER_SITES (diff) | |
Add entry for webmin < 1.600_1 (potential XSS attack).
Feature safe: yes
| -rw-r--r-- | security/vuxml/vuln.xml | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 290fd619c3ef..84ea24f20d70 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -51,6 +51,32 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="ec89dc70-2515-11e2-8eda-000a5e1e33c6"> + <topic>webmin -- potential XSS attack via real name field</topic> + <affects> + <package> + <name>webmin</name> + <range><lt>1.600_1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The webmin updates site reports</p> + <blockquote cite="http://www.webmin.com/updates.html"> + <p>Module: Change Passwords; Version: 1.600; Problem: Fix for potential XSS attack + via real name field; Solution: New module.</p> + </blockquote> + </body> + </description> + <references> + <url>http://www.webmin.com/updates.html</url> + </references> + <dates> + <discovery>2012-11-02</discovery> + <entry>2012-11-02</entry> + </dates> + </vuln> + <vuln vid="3decc87d-2498-11e2-b0c7-000d601460a4"> <topic>ruby - Unintentional file creation caused by inserting an illegal NUL character</topic> <affects> |