OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Miod Vallat (miod_at_cvs.openbsd.org)
Date: Tue Nov 05 2002 - 00:25:50 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    CVSROOT: /cvs
    Module name: src
    Changes by: miodcvs.openbsd.org 2002/11/04 23:25:49

    Modified files:
            usr.sbin/httpd/src/main: Tag: OPENBSD_3_1 http_core.c

    Log message:
    fix a cross-site scripting vuln:
    *) SECURITY: CAN-2002-0840 (cve.mitre.org)
    Prevent a cross-site scripting vulnerability in the default
    error page. The issue could only be exploited if the directive
    UseCanonicalName is set to Off and a server is being run at
    a domain that allows wildcard DNS. [Matthew Murphy]