Red Hat Customer Portal

Skip to main content

CVE-2007-5496

Impact:
Moderate
Public Date:
2008-05-21
Bugzilla:
288271: CVE-2007-5496 setroubleshoot log injection

The MITRE CVE dictionary describes this issue as:

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.

Find out more about CVE-2007-5496 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 5 RHSA-2008:0061 2008-05-20

Affected Packages State

Platform Package State
Red Hat Enterprise Linux version 5 setroubleshoot 2.0.5-3.el5 Fixed
Red Hat Enterprise Linux version 5 setroubleshoot-plugins 2.0.4-2.el5 Fixed

Last Modified