Bugtraq mailing list archives

Re: RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability


From: lupe () lupe-christoph de (Lupe Christoph)
Date: Tue, 1 Jun 2004 23:13:32 +0200

On Sunday, 2004-05-30 at 03:15:44 +0200, Roman Medina wrote:

I also noticed that latest Debian stable distro ships a very old
version of SquirrelMail, which is vulnerable to several old XSS bugs
(in addition to the new one).

The latest Stable is itself quite old. Debian does not release very
often. But security bugs are fixed when they become known. I have not
found any bug report concerning XSS in the Debian bugs database. Please
be so kind and file bugs if you are running Debian. If not, please mail
the Debian Security Team as described in
  http://www.de.debian.org/security/faq#contact

Thank you,
Lupe Christoph
-- 
| lupe () lupe-christoph de       |           http://www.lupe-christoph.de/ |
| "... putting a mail server on the Internet without filtering is like   |
| covering yourself with barbecue sauce and breaking into the Charity    |
| Home for Badgers with Rabies.                            Michael Lucas |


Current thread: