Ubuntu
gnatsweb package

[gnatsweb] [CVE-2007-2808] cross-site scripting vulnerability

Bug #191196 reported by disabled.user
256
Affects Status Importance Assigned to Milestone
gnatsweb (Debian)
Fix Released
Unknown
gnatsweb (Ubuntu)
Invalid
Low
Kees Cook
Dapper
Fix Released
Low
Emanuele Gentili
Edgy
Fix Released
Low
Emanuele Gentili
Feisty
Fix Released
Low
Emanuele Gentili

Bug Description

Binary package hint: gnatsweb

References:
DSA-1486-1 (http://www.debian.org/security/2008/dsa-1486)

Quoting:
"'r0t' discovered that gnatsweb, a web interface to GNU GNATS, did not
correctly sanitize the database parameter in the main CGI script. This
could allow the injection of arbitrary HTML, or javascript code."

Bug Watch Updater (bug-watch-updater)
Changed in gnatsweb:
status: Unknown → Fix Released
Revision history for this message
Emanuele Gentili (emgent) wrote :
Changed in gnatsweb:
assignee: nobody → emgent
importance: Undecided → Low
status: New → In Progress
Revision history for this message
Emanuele Gentili (emgent) wrote :

same version (4.00-1) in edgy, but patch attached.

Revision history for this message
Emanuele Gentili (emgent) wrote :

corrected patch for dapper (fixed changelog comment in edgy too).

Revision history for this message
Emanuele Gentili (emgent) wrote :

same version (4.00-1) in edgy/dapper, but patch attached.

Revision history for this message
Kees Cook (kees) wrote :

Already fixed in Gutsy/Hardy.

Changed in gnatsweb:
assignee: emgent → keescook
status: In Progress → Invalid
assignee: nobody → emgent
importance: Undecided → Low
status: New → Fix Committed
assignee: nobody → emgent
importance: Undecided → Low
status: New → Fix Committed
assignee: nobody → emgent
importance: Undecided → Low
status: New → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnatsweb - 4.00-1ubuntu0.7.04

---------------
gnatsweb (4.00-1ubuntu0.7.04) feisty-security; urgency=low

  * SECURITY UPDATE:
   + gnatsweb.pl (LP: #191196)
    - Fixed missing escaping of the database parameter which leads
      to a cross-site scripting vulnerability (XSS) via this
      parameter (CVE-2007-2808).
   + debian/control
    - Switch Maintainer to Ubuntu MOTU Developers
  * References:
   + http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2808
   + http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=427156

 -- Emanuele Gentili <email address hidden> Fri, 29 Feb 2008 03:40:07 +0100

Changed in gnatsweb:
status: Fix Committed → Fix Released
Kees Cook (kees)
Changed in gnatsweb:
status: Fix Committed → Fix Released
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.