Detections
Analytics

FreeBSD : pyblosxom -- atom flavor multiple XML injection vulnerabilities (b07f3254-f83a-11dd-85a4-ea653f0746ab)

medium Nessus Plugin ID 56400

Language:

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

Security Focus reports :

PyBlosxom is prone to multiple XML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied XML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Solution

Update the affected package.

See Also

http://www.nessus.org/u?c7a88c88

Plugin Details

Severity: Medium

ID: 56400

File Name: freebsd_pkg_b07f3254f83a11dd85a4ea653f0746ab.nasl

Version: 1.8

Type: local

Published: 10/6/2011

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:pyblosxom, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/11/2009

Vulnerability Publication Date: 2/9/2009

Reference Information

BID: 33676