[SECURITY] [DSA 2056-1] New zonecheck packages fix cross-site scripting

------------------------------------------------------------------------ Debian Security Advisory DSA-2056-1 [email protected] http://www.debian.org/security/ Sébastien Delafond June 06, 2010 http://www.debian.org/security/faq -...

CVE-2009-4882

Vulnerability summary (CVE-2009-4882) ZoneCheck CGI (zc.cgi) in ZoneCheck versions 2.0.4-13 and 2.1.0 is affected by a cross-site scripting (XSS) vulnerability due to insufficient input sanitization in the ns parameter to zc.cgi. Exploitation could permit injection of arbitrary script/HTML in the...