PublicDate: 2008-03-05 23:44:00 UTC Candidate: CVE-2008-1168 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1168 Description: Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header, which is not properly handled when displaying the Squid proxy log. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Assigned-to: CVSS: Patches_sarg: upstream_sarg: released (2.2.5) dapper_sarg: ignored (reached end-of-life) edgy_sarg: needed (reached end-of-life) feisty_sarg: needed (reached end-of-life) gutsy_sarg: needed (reached end-of-life) hardy_sarg: released (2.2.5-1) intrepid_sarg: released (2.2.5-1) jaunty_sarg: released (2.2.5-1) karmic_sarg: released (2.2.5-1) devel_sarg: released (2.2.5-1)