Bug 158698 – www-apps/ids-0.83_beta2-r1 <= XSS vulnerability

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Emanuele Gentili 2006-12-20 19:51:35 UTC]

http://localhost/index.cgi?mode=search&searchstring=%3Cscript%3Ealert%28%27bug%27%29%3B%3C%2Fscript%3E


other version vulnerable too:
http://skylinesoaring.org/SNAPSHOTS/index.cgi?mode=search&searchstring=%3Cscript%3Ealert%28%27bug%27%29%3B%3C%2Fscript%3E

[Comment 1 Emanuele Gentili 2006-12-21 11:41:35 UTC]

upstream mailed.

[Comment 2 Matthias Geerdsen (RETIRED) 2007-02-25 19:49:26 UTC]

any news here?

fixing product/...

[Comment 3 Sune Kloppenborg Jeppesen (RETIRED) 2007-03-25 10:45:05 UTC]

Any news on this one?

[Comment 4 Pierre-Yves Rofes (RETIRED) 2007-04-11 19:47:16 UTC]

upstream seems dead...

[Comment 5 Renat Lumpau (RETIRED) 2007-05-28 00:48:36 UTC]

i wouldn't mind dropping this package, as it seems unmaintained and there are plenty of other utilities for this

[Comment 6 Gunnar Wrobel (RETIRED) 2007-08-14 05:46:04 UTC]

Any objections if I go ahead and mask this package? I'll send a last rites mail to -dev that I'm going to remove it if there are no objections.

[Comment 7 Gunnar Wrobel (RETIRED) 2007-08-15 06:57:53 UTC]

masked the package.

[Comment 8 Christian Faulhammer (RETIRED) 2007-09-08 22:35:29 UTC]

(In reply to comment #7)
> masked the package.

last rited in 
http://permalink.gmane.org/gmane.linux.gentoo.devel/51251, so don't forget to remove it.

[Comment 9 Gunnar Wrobel (RETIRED) 2007-09-14 06:07:13 UTC]

Removed package after 30 days, removed mask in package.mask, marking resolved