Bug 390939

Summary:	app-text/man2html: Cross-site scripting (CVE-2011-2770)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	minor
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B4 [noglsa]
Package list:		Runtime testing required:	---
Bug Depends on:	261347
Bug Blocks:

Description GLSAMaker/CVETool Bot gentoo-dev

2011-11-18 19:16:01 UTC

CVE-2011-2770 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-2770):
  Cross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6,
  and possibly other version, allows remote attackers to inject arbitrary web
  script or HTML via unspecified vectors related to error messages.

Comment 1 Pacho Ramos gentoo-dev

2012-03-18 12:14:11 UTC

It was dropped

Comment 2 Alex Legler (RETIRED) archtester

2012-03-18 19:46:09 UTC

Closing noglsa.