Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-1840HistoryApr 03, 2007 - 12:19 a.m.
CVE-2007-1840
2007-04-0300:19:00
Debian Security Bug Tracker
security-tracker.debian.org
6
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.3%
lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | ldap-account-manager | < 1.1.1-2 | ldap-account-manager_1.1.1-2_all.deb |
| Debian | 11 | all | ldap-account-manager | < 1.1.1-2 | ldap-account-manager_1.1.1-2_all.deb |
| Debian | 999 | all | ldap-account-manager | < 1.1.1-2 | ldap-account-manager_1.1.1-2_all.deb |
| Debian | 13 | all | ldap-account-manager | < 1.1.1-2 | ldap-account-manager_1.1.1-2_all.deb |
Related
ubuntucve
ubuntucve
CVE-2007-1840
2007-04-03 00:00:00
prion
prion
Cross site scripting
2007-04-03 00:19:00
cve
cve
CVE-2007-1840
2007-04-03 00:19:00
osv
osv
ldap-account-manager
2007-05-07 00:00:00
debian
debian
openvas
openvas
Debian: Security Advisory (DSA-1287-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1287-1 (ldap-account-manager (0.4.9-2sarge1))
2008-01-17 00:00:00
nessus
nessus
Debian DSA-1287-1 : ldap-account-manager - multiple vulnerabilities
2007-05-10 00:00:00
securityvulns
securityvulns
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.3%
Related for DEBIANCVE:CVE-2007-1840