65 matches found
DEBIAN-CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
Cross site scripting
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
CVE-2011-2770 is an XSS vulnerability in man2html.cgi.c (man2html 1.6 and possibly other versions) where error message handling fails to escape input, enabling remote attackers to inject arbitrary script/HTML via error-message vectors. Public references across NVD, Debian DSA-2335, RH advisories,...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
CVE-2011-2770
Cross-site scripting XSS vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to error messages...
[SECURITY] [DSA 2335-1] man2html security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2335-1 [email protected] http://www.debian.org/security/ Nico Golde November 5th, 2011 http://www.debian.org/security/faq -...
Debian DSA-2335-1 : man2html - missing input sanitization
Tim Starling discovered that the Debian-native CGI wrapper for man2html, a program to convert UNIX man pages to HTML, is not properly escaping user-supplied input when displaying various error messages. A remote attacker can exploit this flaw to conduct cross-site scripting XSS attacks...
[SECURITY] [DSA 2335-1] man2html security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2335-1 [email protected] http://www.debian.org/security/ Nico Golde November 5th, 2011 http://www.debian.org/security/faq -...
DSA-2335-1 man2html - missing input sanitization
Bulletin has no description...
Debian Security Advisory DSA 035-1 (man2html)
The remote host is missing an update to man2html announced via advisory DSA 035-1. OpenVAS Vulnerability Test $Id: deb0351.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 035-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 035-1 (man2html)
The remote host is missing an update to man2html announced via advisory DSA 035-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-035-1 : man2html - remote denial of service
It has been reported that one can tweak man2html remotely into consuming all available memory. This has been fixed by Nicolas Lichtmaier with help of Stephan Kulow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...
CVE-1999-1565
CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...
CVE-1999-1565
Man2html 2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-2001-0457
man2html before 1.5-22 allows remote attackers to cause a denial of service memory exhaustion...
CVE-2001-0457
CVE-2001-0457 affects man2html prior to 1.5-22. The Debian security advisory DSA-035-1 and OpenVAS entries warn that remote attackers could trigger a denial of service via memory exhaustion. A patch/update to the affected man2html package is the indicated remediation. The OpenVAS NASL notes the i...