S-129: Mantis Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-129: Mantis Vulnerability
# 1  
Old 01-22-2008
S-129: Mantis Vulnerability

Several remote vulnerabilities have been discovered in Mantis, a web based bug tracking system. The risk is LOW. Multiple cross site scripting issues allowed a remote attacker to insert malicious HTML or web script into Mantis web pages.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

How do I append a ^M to the end of each 129 character string

Hello all, I have a stumper of a problem. I am trying to append a ^M or "newline" to the end of each 129 character string in a huge file in unix. Each string starts with A00. I am trying to get the file to go from... A00vswjdv1 Test Junk Junk A00vswjdv2 Test Junk Junk ... (6 Replies)
Discussion started by: Captain
6 Replies
Login or Register to Ask a Question
UUSEND(1C)																UUSEND(1C)

NAME
uusend - send a file to a remote host SYNOPSIS
uusend [ -m mode ] sourcefile sys1!sys2!..!remotefile DESCRIPTION
Uusend sends a file to a given location on a remote system. The system need not be directly connected to the local system, but a chain of uucp(1) links needs to connect the two systems. If the -m option is specified, the mode of the file on the remote end will be taken from the octal number given. Otherwise, the mode of the input file will be used. The sourcefile can be ``-'', meaning to use the standard input. Both of these options are primarily intended for internal use of uusend. The remotefile can include the ~userid syntax. DIAGNOSTICS
If anything goes wrong any further away than the first system down the line, you will never hear about it. SEE ALSO
uux(1), uucp(1), uuencode(1) BUGS
This command should not exist, since uucp should handle it. All systems along the line must have the uusend command available and allow remote execution of it. Some uucp systems have a bug where binary files cannot be the input to a uux command. If this bug exists in any system along the line, the file will show up severly munged. 4th Berkeley Distribution April 24, 1986 UUSEND(1C)