.:[ packet storm ]:.
                           
the internet security encyclopedia
the internet security encyclopedia

 ///  File Name:USN-686-1.txt
Description:
Ubuntu Security Notice USN-686-1 - Morgan Todd discovered that AWStats did not correctly strip quotes from certain parameters, allowing for an XSS attack when running as a CGI. If a user was tricked by a remote attacker into following a specially crafted URL, the user's authentication information could be exposed for the domain where AWStats was hosted.
Homepage:http://security.ubuntu.com/
File Size:3971
Related CVE(s):CVE-2008-3714
Last Modified:Dec 3 21:50:35 2008
MD5 Checksum:75c145ec64f4430ab0be1e1967985fce

 .:. Back