CVE-2007-1840

Publication date 3 April 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

lib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special characters in LDAP data, which allows remote attackers to have an unknown impact, probably cross-site scripting (XSS).

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
ldap-account-manager 9.10 karmic
Fixed 1.1.1-2
9.04 jaunty
Fixed 1.1.1-2
8.10 intrepid
Fixed 1.1.1-2
8.04 LTS hardy
Fixed 1.1.1-2
7.10 gutsy
Fixed 1.1.1-2
7.04 feisty
Fixed 1.1.1-2
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life