First Last Prev Next    No search results available      Search page      Enter new bug
Bug#: 59336
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo Security <security@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Sune Kloppenborg Jeppesen <jaervosz@gentoo.org>
Add CC:
CC:
URL:
Summary:
Status Whiteboard:
Keywords:
Flags: Requestee:
 
 
  ()

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 59336 depends on: Show dependency tree
Bug 59336 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2004-08-03 23:02 0000 
A vulnerability has been discovered in Horde IMP, which can be exploited by
malicious people to conduct script insertion attacks.

------- Comment #1 From Sune Kloppenborg Jeppesen 2004-08-03 23:06:43 0000 ------- 
Mike please bump to latest version.

Changes in this release:
    - SECURITY: Closed an XSS hole in the HTML viewer, a variation to the one
      reported in http://www.greymagic.com/security/advisories/gm005-mc/.
      This vulnerability only exists when using the Internet Explorer to
      access IMP and only when using the inline MIME viewer for HTML messages.

------- Comment #2 From SpanKY 2004-08-04 21:28:13 0000 ------- 
talked to stuart about horde/webapp-config and he said he should have a
workaround for me soon

ive been putting off version bumping of all the horde packages; once he gets
back to me i'll go through and update all of them

------- Comment #3 From SpanKY 2004-08-07 23:40:40 0000 ------- 
ebuild has been added with all the required KEYWORDS; ready for GLSA to be
written / sent

------- Comment #4 From Sune Kloppenborg Jeppesen 2004-08-08 11:56:29 0000 ------- 
GLSA drafted : security please review.

PS: As you might notice I reused heavily from the last Horde-IMP GLSA and proposals for a better title are welcome.

------- Comment #5 From Kurt Lieber 2004-08-10 06:14:19 0000 ------- 
glsa 200408-07
First Last Prev Next    No search results available      Search page      Enter new bug