S-129: Mantis Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-129: Mantis Vulnerability
# 1  
Old 01-22-2008
S-129: Mantis Vulnerability

Several remote vulnerabilities have been discovered in Mantis, a web based bug tracking system. The risk is LOW. Multiple cross site scripting issues allowed a remote attacker to insert malicious HTML or web script into Mantis web pages.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Shell Programming and Scripting

How do I append a ^M to the end of each 129 character string

Hello all, I have a stumper of a problem. I am trying to append a ^M or "newline" to the end of each 129 character string in a huge file in unix. Each string starts with A00. I am trying to get the file to go from... A00vswjdv1 Test Junk Junk A00vswjdv2 Test Junk Junk ... (6 Replies)
Discussion started by: Captain
6 Replies
Login or Register to Ask a Question
DEBBUGSCONFIG(8)					      System Manager's Manual						  DEBBUGSCONFIG(8)

NAME
debbugsconfig - copy basic debbugs configuration files from templates SYNOPSIS
debbugsconfig DESCRIPTION
debbugsconfig will copy basic debbugs configuration files from templates if the files do not already exist, and will also create BTS user documentation in HTML and text. It should be run on installation and whenever /etc/debbugs/config or /etc/debbugs/text are changed. FILES
debbugsconfig creates the following template configuration files in $gConfigDir (/etc/debbugs by default): config General debbugs configuration file. text Longer messages output by debbugs. Maintainers Index of maintainers for each package. This will typically be automatically generated. Maintainers.override Manual overrides for the maintainer index. pseudo-packages.description Descriptions of any entries in the system's maintainer index that do not correspond to "real" packages. For example, the Debian Project uses pseudo-packages for bugs against facilities such as the Debian web site, the mailing list archives, and the bug tracking system itself. sources Index of source packages corresponding to each package. This may be used when several packages are produced from a single source, in which case the bug tracking system will group them together with links in the web front-end. debbugsconfig creates the following template state files in $gSpoolDir (/var/lib/debbugs/spool by default): nextnumber The file which records the tracking number that will be assigned to the next incoming bug report. index.archive.realtime Real-time index of archived bugs. Created empty. index.db.realtime Real-time index of non-archived bugs. Created empty. debbugsconfig creates the following documents in $gWebDir (/var/lib/debbugs/www by default): index.html Main contents page. Access.html, bug-log-access.txt Description of how to access bug reports. Reporting.html, bug-reporting.txt Advice on reporting bugs. server-control.html, bug-maint-mailcontrol.txt Introduction to the bug control and manipulation mail server. server-refcard.html, bug-mailserver-refcard.txt Mail servers' reference card. server-request.html, bug-log-mailserver.txt Introduction to the bug system request server. AUTHORS
debbugsconfig was originally written by Darren Benham and later rewritten by Josip Rodin. Colin Watson wrote this man page. DEBBUGSCONFIG(8)