CVE-2007-1840
Published: 3 April 2007
lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).
Priority
Status
| Package | Release | Status |
|---|---|---|
|
ldap-account-manager Launchpad, Ubuntu, Debian |
dapper |
Ignored
(end of life)
|
| edgy |
Ignored
(end of life, was needed)
|
|
| feisty |
Released
(1.1.1-2)
|
|
| gutsy |
Released
(1.1.1-2)
|
|
| hardy |
Released
(1.1.1-2)
|
|
| intrepid |
Released
(1.1.1-2)
|
|
| jaunty |
Released
(1.1.1-2)
|
|
| karmic |
Released
(1.1.1-2)
|
|
| upstream |
Needs triage
|