Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
Hello and Welcome from United States to the UNIX and Linux Forums! Thank You for Visiting and Joining Our Global Community.
|
|
google unix.com
|
|||||||
| Forums | Register | Forum Rules | Links | Albums | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
 |
| Security Advisories (RSS) UNIX and Linux Security Advisories Via RSS News |
More UNIX and Linux Forum Topics You Might Find Helpful
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:246 ] php | iBot | Security Advisories (RSS) | 0 | 09-25-2009 05:00 PM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:224 ] postfix | iBot | Security Advisories (RSS) | 0 | 08-31-2009 02:45 PM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:192 ] phpmyadmin | iBot | Security Advisories (RSS) | 0 | 08-05-2009 12:15 PM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:152 ] pulseaudio | iBot | Security Advisories (RSS) | 0 | 07-17-2009 05:30 PM |
| Mandriva: Subject: [Security Announce] [ MDVSA-2009:117 ] ntp | iBot | Security Advisories (RSS) | 0 | 05-19-2009 12:15 PM |
 |
Powered by 
|
|
|
LinkBack | Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
10-12-2009
|
|||||
|
|||||
|
Mandriva: Subject: [Security Announce] [ MDVSA-2009:268 ] mono
LinuxSecurity.com: Multiple vulnerabilities has been found and corrected in mono: Multiple cross-site scripting (XSS) vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to (1) HtmlControl.cs (PreProcessRelativeReference), (2) HtmlForm.cs (RenderAttributes), (3) HtmlInputButton (RenderAttributes), (4) HtmlInputRadioButton (RenderAttributes), and (5) HtmlSelect (RenderChildren) (CVE-2008-3422). The XML HMAC signature system did not correctly check certain lengths. If an attacker sent a truncated HMAC, it could bypass authentication, leading to potential privilege escalation (CVE-2009-0217). This update fixes these vulnerabilities.
More... |
|
| Bookmarks |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
![Mandriva: Subject: [Security Announce] [ MDVSA-2009:268 ] mono](http://solaris.unix.com/iconimages/security-advisories-rss/mandriva-subject-security-announce-mdvsa-2009-268-mono_ltr.gif)
Hybrid Mode
