Secunia Logo
Netsikker nu! 2008
 
Fedora update for mantis
Secunia Advisory: SA28352
Release Date: 2008-01-07
Popularity: 3,470 views

Critical:
Less critical
Impact: Cross Site Scripting
Where: From remote
Solution Status: Vendor Patch

OS:Fedora 7
Fedora 8

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-6611


Description:
Fedora has issued an update for mantis. This fixes a vulnerability, which can be exploited by malicious users to conduct script insertion attacks.

For more information:
SA28185

Solution:
Apply updated packages.

-- Fedora 7 --

ce45d334069c3bb251ce07951d52061f74db6495 mantis-config-httpd-1.1.0-1.fc7.noarch.rpm
d0a7684c55a7893859479e677b0327f6c28f993c mantis-1.1.0-1.fc7.noarch.rpm
d6494ebcafee111b06ff3577620f769d46bfaedb mantis-1.1.0-1.fc7.src.rpm

-- Fedora 8 --

2f1ef51b26211083f722a10f0a16c588b7d007fe mantis-config-httpd-1.1.0-1.fc8.noarch.rpm
3055bf43d1633d367771c4239dfd57b33a997933 mantis-1.1.0-1.fc8.noarch.rpm
b3292df0950a4ebab4443cb49764bab2d7737f5c mantis-1.1.0-1.fc8.src.rpm

Original Advisory:
https://www.redhat.com/archives/fedor...e-announce/2008-January/msg00227.html
https://www.redhat.com/archives/fedor...e-announce/2008-January/msg00309.html

Other References:
SA28185:
http://secunia.com/advisories/28185/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Oracle Products Multiple Vulnerabilities // 48 views
2. BEA WebLogic Server Multiple Vulnerabilities // 47 views
3. Sun Solaris "sadmind" Buffer Overflow Vulnerability // 45 views
4. VLC Media Player XSPF Processing Memory Corruption Vulnerability // 35 views
5. BEA WebLogic Workshop NetUI Pageflow Information Disclosure Vulnerability // 34 views
6. Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities // 34 views
7. MyPHPDating "id" SQL Injection Vulnerability // 33 views
8. Microsoft Windows IIS IPP Service Integer Overflow Vulnerability // 32 views
9. WordPress WP Comment Remix Plugin Multiple Vulnerabilities // 31 views
10. phpJobScheduler "installed_config_file" File Inclusion Vulnerabilities // 30 views