[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Xoops RC3 script injection vulnerability fixed

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Xoops RC3 script injection vulnerability fixed
From: Sergio <w4z002@xxxxxxxxxxx>
Date: 26 Sep 2002 14:58:20 -0000
Delivered-to: mailing list bugtraq@xxxxxxxxxxxxxxxxx
Delivered-to: moderator for bugtraq@xxxxxxxxxxxxxxxxx
Delivery-date: Thu, 26 Sep 2002 18:14:23 +0200
Envelope-to: bugtraq@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

In-Reply-To: <200209241358.g8ODwqx97021@xxxxxxxxxxxxxxxxxxxxxxxx>

RC3.0.5 is released to fix a security vulnerability recently posted on 
Bugtraq ML.

Overview
=======
There was a vunerability when a user previews/submits a news in the News 
module, HTML tags were allowed to process.


Solution
=======
 All users are strongly recommended to download the following packages and 
upgrade to this version.

[b][u][size=large]New Users[/size][/u][/b]
[url=http://www.xoops.org/modules/mydownloads/viewcat.php?cid=16]Download 
Full RC3.0.5 Package[/url]

[b][u][size=large]RC3.0.4 Users[/size][/u][/b]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=232]
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)[/url]

[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=231]
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)[/url]


[b][u][size=large]RC3.0.3 Users[/size][/u][/b]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=187]
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=232]
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)[/url]

[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=186]
Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=231]
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)[/url]


[b][u][size=large]RC3.0.2 Users[/size][/u][/b]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=173]
Download RC3.0.2->RC3.0.3 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=187]
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=232]
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)[/url]

[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=172]
Download RC3.0.2->RC3.0.3 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=186]
Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=231]
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)[/url]


[b][u][size=large]RC3.0.1 Users[/size][/u][/b]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=167]
Download RC3.0.1->RC3.0.2 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=173]
Download RC3.0.2->RC3.0.3 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=187]
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=232]
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)[/url]

[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=160]
Download RC3.0.1->RC3.0.2 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=172]
Download RC3.0.2->RC3.0.3 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=186]
Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=231]
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)[/url]


[b][u][size=large]RC3.0.0 Users[/size][/u][/b]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=161]
Download RC3.0.0->RC3.0.1 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=167]
Download RC3.0.1->RC3.0.2 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=173]
Download RC3.0.2->RC3.0.3 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=187]
Download RC3.0.3->RC3.0.4 Upgrade Package (zip)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=232]
Download RC3.0.4->RC3.0.5 Upgrade Package (zip)[/url]

[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=168]
Download RC3.0.0->RC3.0.1 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=160]
Download RC3.0.1->RC3.0.2 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=172]
Download RC3.0.2->RC3.0.3 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=186]
Download RC3.0.3->RC3.0.4 Upgrade Package (tar.gz)[/url]
[url=http://www.xoops.org/modules/mydownloads/singlefile.php?lid=231]
Download RC3.0.4->RC3.0.5 Upgrade Package (tar.gz)[/url]


Note
======
>From this release, users are not allowed to use HTML tags when posting 
news/comments. As for forum posts, users can still use HTML as long as  
HTML tags are enabled in the posting forum. However, we advise you to 
always disable HTML posts in forums as well.

Prev by Date: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv
Next by Date: Errata: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv
Previous by thread: RE: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv
Next by thread: Errata: iDEFENSE Security Advisory 09.26.2002: Exploitable Buffer Overflow in gv
Index(es):
- Date
- Thread