Detections
Analytics

Debian DSA-088-1 : fml - improper character escaping

high Nessus Plugin ID 14925

Synopsis

The remote Debian host is missing a security-related update.

Description

The fml (a mailing list package) as distributed in Debian GNU/Linux 2.2 suffers from a cross-site scripting problem. When generating index pages for list archives the `<' and `>' characters were not properly escaped for subjects.

Solution

This has been fixed in version 3.0+beta.20000106-5, and we recommend that you upgrade your fml package to that version. Upgrading will automatically regenerate the index pages.

See Also

http://www.debian.org/security/2001/dsa-088

Plugin Details

Severity: High

ID: 14925

File Name: debian_DSA-088.nasl

Version: 1.25

Type: Local

Agent: unix

Published: 9/29/2004

Updated: 4/2/2025

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:fml, cpe:/o:debian:debian_linux:2.2

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Exploit Available: true

Exploit Ease: No exploit is required

Patch Publication Date: 12/5/2001

Reference Information

BID: 3623

DSA: 088