Package: sympa Severity: normal Tags: security
Good day, >From CAN-2004-1735 : | Cross-site scripting (XSS) vulnerability in the create list option in | Sympa 4.1.x and earlier allows remote authenticated users to inject | arbitrary web script or HTML via the description field. More info is available on upstream BTS : http://listes.cru.fr/mantis/view_bug_advanced_page.php?f_id=0000327 Regards. -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable') Architecture: powerpc (ppc) Kernel: Linux 2.6.10-powerpc Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages sympa depends on: ii adduser 3.62 Add and remove users and groups ii debconf 1.4.46 Debian configuration management sy ii exim4-daemon-heavy [mail-tr 4.50-4 exim MTA (v4) daemon with extended ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an pn libcgi-fast-perl Not found. pn libcrypt-ciphersaber-perl Not found. ii libdbd-mysql-perl 2.9003-3 A Perl5 database interface to the ii libdbi-perl 1.46-6 Perl5 database interface by Tim Bu pn libfcgi-perl Not found. ii libio-stringy-perl 2.110-1 Perl5 modules for IO from scalars ii libmailtools-perl 1.62-1 Manipulate email in perl programs pn libmd5-perl Not found. ii libmime-perl 5.417-1 Perl5 modules for MIME-compliant m pn libmsgcat-perl Not found. pn libnet-ldap-perl Not found. pn mhonarc Not found. ii perl [libmime-base64-perl] 5.8.4-6 Larry Wall's Practical Extraction ii perl-suid 5.8.4-6 Runs setuid Perl scripts ii sysklogd [system-log-daemon 1.4.1-16 System Logging Daemon -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
