Summary
The remote host is missing an update to gforge
announced via advisory DSA 1475-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201475-1
Insight
José Ramón Palanco discovered th a cross site scripting vulnerability in GForge, a collaborative development tool, allows remote attackers to inject arbitrary web script or HTML in the context of a logged in user's session.
For the stable distribution (etch), this problem has been fixed in version 4.5.14-22etch5.
The old stable distribution (sarge) is not affected by this problem.
For the unstable distribution (sid) this problem has been fixed in version 4.6.99+svn6347-1.
We recommend that you upgrade your gforge package.
Severity
Classification
-
CVE CVE-2007-0176 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities