bugtraq - Re: Xymon monitor cross-site scripting vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Mon, 4 Apr 2011 21:41:56 +0300
From: Henri Salo <henri@...v.fi>
To: Henrik Størner <henrik@...n.dk>
Cc: bugtraq@...urityfocus.com
Subject: Re: Xymon monitor cross-site scripting vulnerabilities

On Sun, Apr 03, 2011 at 12:15:12PM +0200, Henrik Størner wrote:
> Several cross-site scripting vulnerabilities have been identified in
> the Xymon systems- and network-monitoring tool available at
> http://sourceforge.net/projects/xymon/
> 
> All versions prior to 4.3.1 (released April 3, 2011) are vulnerable.
> 
> I would like to thank David Ferrest for notifying me of this issue.
> 
> 
> Henrik Størner,
> lead Xymon developer.

Does these issues have CVE-identifier? Where can I see the full details of these vulnerabilities?

Best regards,
Henri Salo