Oval Definition:oval:org.mitre.oval:def:11904
Revision Date:2014-07-21Version:19
Title:DSA-2056 zonecheck -- missing input sanitising
Description:It was discovered that in zonecheck, a tool to check DNS configurations, the CGI does not perform sufficient sanitation of user input; an attacker can take advantage of this and pass script code in order to perform cross-site scripting attacks.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-4882
CVE-2010-2052
CVE-2010-2155
DSA-2056
Platform(s):Debian GNU/Linux 5.0
Product(s):zonecheck
Definition Synopsis
  • Debian GNU/Linux 5.0 is installed
  • AND Installed architecture is all
  • AND Packages section
  • zonecheck is earlier than 2.0.4-13lenny1
  • OR zonecheck-cgi is earlier than 2.0.4-13lenny1
  • BACK