[26004] in bugtraq
Re: XSS in HTDIG
daemon@ATHENA.MIT.EDU (webmaster (Stephen Ostermiller))
Sat Jun 29 00:03:17 2002
Message-ID: <3D1AE7DE.8090808@gcctech.com>
Date: Thu, 27 Jun 2002 06:24:30 -0400
From: "webmaster (Stephen Ostermiller)" <webmaster@gcctech.com>
MIME-Version: 1.0
To: Howard Yeend <h_bugtraq@yahoo.com>, bugtraq@securityfocus.com
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Version 3.2.0b4-011302 of htdig does not appear to be vulnerable.
(It is the lastest version that is provided by redhat but does not appear on sourceforge:
http://sourceforge.net/project/showfiles.php?group_id=4593 )
Howard: which version of htdig did you test this against?
