diff options
| author | Thierry Thomas <thierry@FreeBSD.org> | 2010-09-28 17:30:09 +0000 |
|---|---|---|
| committer | Thierry Thomas <thierry@FreeBSD.org> | 2010-09-28 17:30:09 +0000 |
| commit | bd94ed9c6bc044713e097879439b74ef133f8f99 (patch) | |
| tree | e330a9822b67e4b618ff8491068976fffdc9885d /security | |
| parent | 7a52343a4c5952ac96f297903db8fc36ac3c4fc2 (diff) | |
| download | ports-bd94ed9c6bc044713e097879439b74ef133f8f99.tar.gz ports-bd94ed9c6bc044713e097879439b74ef133f8f99.zip | |
Report a XSS vulnerability in mail/horde-imp.
Notes
Notes:
svn path=/head/; revision=262045
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 8c5e896cd9bb..d85aed6ece3d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="6c4db192-cb23-11df-9c1b-0011098ad87f"> + <topic>horde-imp -- XSS vulnerability</topic> + <affects> + <package> + <name>horde-imp</name> + <range><lt>4.3.8,1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The Horde team reports:</p> + <blockquote cite="http://article.gmane.org/gmane.comp.horde.announce/516"> + <p>Thanks to Naumann IT Security Consulting for reporting the XSS + vulnerability.</p> + <p>The major changes compared to IMP version H3 (4.3.7) are:</p> + <p>* Fixed an XSS vulnerability in the Fetchmail configuration.</p> + </blockquote> + </body> + </description> + <references> + <url>http://article.gmane.org/gmane.comp.horde.announce/516</url> + <url>http://git.horde.org/diff.php/imp/docs/CHANGES?rt=horde&r1=1.699.2.424&r2=1.699.2.430&ty=h</url> + </references> + <dates> + <discovery>2010-09.28</discovery> + <entry>2010-09-28</entry> + </dates> + </vuln> + <vuln vid="8fc55043-cb1e-11df-9c1b-0011098ad87f"> <topic>horde-base -- XSS and CSRF vulnerabilities</topic> <affects> |