Oval Definition:oval:org.mitre.oval:def:19781
Revision Date:2014-06-23Version:6
Title:DSA-1486-1 gnatsweb - cross-site scripting
Description:r0t discovered that gnatsweb, a web interface to GNU GNATS, did not correctly sanitise the database parameter in the main CGI script. This could allow the injection of arbitrary HTML, or JavaScript code.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2007-2808
DSA-1486-1
Platform(s):Debian GNU/Linux 4.0
Product(s):gnatsweb
Definition Synopsis
  • Debian GNU/Linux 4.0 is installed.
  • AND gnatsweb DPKG is earlier than 0:4.00-1etch1
    • BACK