tags 377299 +patch thanks Hello,
> CVE-2006-3320: "Cross-site scripting (XSS) vulnerability in command.php > in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary > web script or HTML via the command parameter." I've already fixed this by NMU in unstable. I've also prepared an updated package for stable - question is if the security team wants to release an advisory for this and if this package is ok. See attachment. Let me know, if it's ok I'll upload it to stable-security. Attached are the diffs for the sid NMU and the proposed sarge NMU. Thanks. Thijs
diff -u sitebar-3.2.6/debian/changelog sitebar-3.2.6/debian/changelog
--- sitebar-3.2.6/debian/changelog
+++ sitebar-3.2.6/debian/changelog
@@ -1,3 +1,11 @@
+sitebar (3.2.6-7.1) unstable; urgency=low
+
+ * Non-maintainer upload for security bug fix.
+ * Properly encode the 'command' parameter of command.php
+ (CVE-2006-3320, Closes: #377299).
+
+ -- Thijs Kinkhorst <[EMAIL PROTECTED]> Fri, 28 Jul 2006 14:42:47 +0200
+
sitebar (3.2.6-7) unstable; urgency=low
* Updated maintainer field to reference my shiny new debian.org address
only in patch2:
unchanged:
--- sitebar-3.2.6.orig/command.php
+++ sitebar-3.2.6/command.php
@@ -3814,7 +3814,7 @@
?>
-<div id="<?php echo ($cw->hasErrors()?$errId:'command').'Head'?>"><?php echo T($cw->command)?></div>
+<div id="<?php echo ($cw->hasErrors()?$errId:'command').'Head'?>"><?php echo htmlspecialchars(T($cw->command))?></div>
<div id="<?php echo ($cw->hasErrors()?$errId:'command').'Body'?>">
<?php
if ($cw->hasErrors())
diff -u sitebar-3.3.8/debian/changelog sitebar-3.3.8/debian/changelog
--- sitebar-3.3.8/debian/changelog
+++ sitebar-3.3.8/debian/changelog
@@ -1,3 +1,11 @@
+sitebar (3.3.8-1.1) unstable; urgency=high
+
+ * High urgency upload for RC security bug fix.
+ * Properly encode the 'command' parameter of command.php
+ (CVE-2006-3320, Closes: #377299).
+
+ -- Thijs Kinkhorst <[EMAIL PROTECTED]> Fri, 28 Jul 2006 14:29:31 +0200
+
sitebar (3.3.8-1) unstable; urgency=low
* New upstream release and new maintainer (Closes: #358893)
only in patch2:
unchanged:
--- sitebar-3.3.8.orig/command.php
+++ sitebar-3.3.8/command.php
@@ -5809,7 +5809,7 @@
?>
<div id="<?php echo ($cw->hasErrors()?$errId:'command').'Head'?>" class="cmnTitle">
<div id="help" onclick="SB_openHelp('<?php echo $onlineHelp ?>')">?</div>
-<div id="command"><?php echo SB_T($cw->command)?></div>
+<div id="command"><?php echo htmlspecialchars(SB_T($cw->command))?></div>
</div>
<div id="<?php echo ($cw->hasErrors()?$errId:'command').'Body'?>">
<?php
signature.asc
Description: This is a digitally signed message part
