URL:
<http://savannah.nongnu.org/patch/?7517>
Summary: HTTP: fix XSS in error handler
Project: mldonkey, a multi-networks file-sharing client
Submitted by: mldonkeyuser777
Submitted on: Mo 28 Mär 2011 18:50:18 CEST
Category: None
Severity: 3 - Normal
Item Group: None
Status: None
Assigned to: None
Open/Closed: Open
Discussion Lock: Any
Release:
Release: None
Operating System: None
Binaries Origin: None
CPU type: None
_______________________________________________________
Details:
Hi, I just was testing my localhost with openvas and it launched nikto over
mldonkey webserver in port 4080, I do not know really about if it a false
warning or not.
this is a gentoo box:
Linux 2.6.38 #1 SMP Sun Mar 20 XX:54:51 CET 2011 i686 Intel(R) Pentium(R) 4
CPU 3.00GHz GenuineIntel GNU/Linux
net-p2p/mldonkey
Latest version available: 3.0.5
Latest version installed: 3.0.5
Size of files: 2,715 kB
Log is attached.
_______________________________________________________
Follow-up Comments:
-------------------------------------------------------
Date: Mi 18 Aug 2004 05:53:22 CEST By: Walter Landry <landry>
The current config mechanism is awkward. It is better to make a config into a
project of it's own. Sort of like what is used for "tla grab". Then "get",
"merge", etc. become natural operations.
_______________________________________________________
Reply to this item at:
<http://savannah.nongnu.org/patch/?7517>
_______________________________________________
Nachricht geschickt von/durch Savannah
http://savannah.nongnu.org/
_______________________________________________
Mldonkey-users mailing list
[email protected]
http://lists.nongnu.org/mailman/listinfo/mldonkey-users