Candidate: CVE-2009-4590 PublicDate: 2010-01-07 18:30:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4590 http://base.secureideas.net/news.php Description: Cross-site scripting (XSS) vulnerability in base_local_rules.php in Basic Analysis and Security Engine (BASE) before 1.4.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: Patches_acidbase: upstream_acidbase: released (1.4.4) dapper_acidbase: ignored (reached end-of-life) hardy_acidbase: ignored (reached end-of-life) intrepid_acidbase: needs-triage (reached end-of-life) jaunty_acidbase: ignored (reached end-of-life) karmic_acidbase: ignored (reached end-of-life) lucid_acidbase: not-affected (1.4.4-3ubuntu1) maverick_acidbase: not-affected (1.4.4-3ubuntu1) natty_acidbase: not-affected (1.4.4-3ubuntu1) oneiric_acidbase: not-affected (1.4.4-3ubuntu1) devel_acidbase: not-affected (1.4.4-3ubuntu1)