Launchpad.net

CVE 2007-6110

Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.

Related bugs and status

CVE-2007-6110 (Candidate) is related to these bugs:

Bug #172277: [CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6

		In	Importance	Status
172277	[CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6	htdig (Ubuntu)	Undecided	Fix Released
172277	[CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6	htdig (Debian)	Unknown	Fix Released
172277	[CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6	htdig (Ubuntu Dapper)	Undecided	Invalid
172277	[CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6	htdig (Ubuntu Edgy)	Undecided	Fix Released
172277	[CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6	htdig (Ubuntu Hardy)	Undecided	Fix Released
172277	[CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6	htdig (Ubuntu Feisty)	Undecided	Fix Released
172277	[CVE-2007-6110] Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6	htdig (Ubuntu Gutsy)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

BID: 26610
FEDORA: FEDORA-2007-757
REDHAT: RHSA-2007:1095
SECUNIA: 27850
SECUNIA: 27890
SUSE: SUSE-SR:2007:025
CONFIRM: http://bugs.debian.org...
DEBIAN: DSA-1429
SECUNIA: 28062
SECUNIA: 27965
SECTRACK: 1019010
VUPEN: ADV-2007-4038
MISC: http://sourceforge.net...
OVAL: oval:org.mitre.oval:de...