Red Hat Security AdvisoryRHSA-2007:1095
htdig security update
Released 2007-12-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) htdig-3:3.2.0b6-9.0.1.el5_1, htdig-3:3.2.0b6-9.0.1.el5_1.i386, htdig-3:3.2.0b6-9.0.1.el5_1.ia64 +5
- Red Hat Enterprise Linux AS version 4 htdig-3:3.2.0b6-4.el4_6, htdig-3:3.2.0b6-4.el4_6.i386, htdig-3:3.2.0b6-4.el4_6.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) htdig-3:3.2.0b6-9.0.1.el5_1, htdig-3:3.2.0b6-9.0.1.el5_1.i386
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) htdig-3:3.2.0b6-9.0.1.el5_1, htdig-web-3:3.2.0b6-9.0.1.el5_1, htdig-web-3:3.2.0b6-9.0.1.el5_1.i386
- Red Hat Enterprise Linux Desktop version 4 htdig-3:3.2.0b6-4.el4_6, htdig-3:3.2.0b6-4.el4_6.i386, htdig-web-3:3.2.0b6-4.el4_6 +1
- Red Hat Enterprise Linux ES version 4 htdig-3:3.2.0b6-4.el4_6, htdig-3:3.2.0b6-4.el4_6.i386, htdig-3:3.2.0b6-4.el4_6.ia64 +3
- Red Hat Enterprise Linux WS version 4 htdig-3:3.2.0b6-4.el4_6, htdig-3:3.2.0b6-4.el4_6.i386, htdig-3:3.2.0b6-4.el4_6.ia64 +3
Fixes 1 record
Priority LOW 27
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04386 · Published 2007-11-23 · Fixed CWE-79
