MDVSA-2011:003 -- Mandriva MHonArc| ID: oval:org.secpod.oval:def:300396 | Date: (C)2012-01-07 (M)2023-11-09 |
| Class: PATCH | Family: unix |
Multiple vulnerabilities has been found and corrected in MHonArc: MHonArc 2.6.16 allows remote attackers to cause a denial of service via start tags that are placed within other start tags, as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> sequence, a different vulnerability than CVE-2010-4524 . Cross-site scripting vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences . Packages for 2009.0 are provided as of the Extended Maintenance Program
| Platform: |
| Mandriva Linux 2010.0 |
| Mandriva Linux 2010.1 |
| Mandriva Linux 2009.0 |
