Advisories:rPSA-2008-0286

From rPath Wiki

rPath Security Advisory 2008-0286-2

Published: 2008-09-29

Updated

1. 2008-09-29 added missing rPath Issue Tracking System URL

Products

• rPath Linux 2

Rating

Major

Exposure Level Classification

Remote User Deterministic Vulnerability

Updated Versions

• mono=conary.rpath.com@rpl:2/1.2.6-5-0.1

rPath Issue Tracking System

• RPL-2831

References

• CVE-2008-3906

Description

Previous versions of the mono package contain an HTTP header

vulnerability which may allow attackers to insert cross-site

scripting or other malicious code into an HTTP response.

29 September 2008 Update: added missing rPath Issue Tracking

System URL

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html