FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-0541

This CVE name corresponds to:

Entered	Topic
2010-08-17	ruby -- UTF-7 encoding XSS vulnerability in WEBrick

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-0541 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-0541
Phase	Assigned(20100203)

Description

Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.

References

Source	Reference
CONFIRM	http://support.apple.com/kb/HT4188
APPLE	APPLE-SA-2010-06-15-1
MANDRIVA	MDVSA-2011:097
MANDRIVA	MDVSA-2011:098
REDHAT	RHSA-2011:0908
REDHAT	RHSA-2011:0909
BID	40871
BID	40895
SECUNIA	40220
VUPEN	ADV-2010-1481