• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Bradford Barrett Webalizer Cross-Agent Scripting Vulnerability

Solution:
A patch has been released which rectifies this issue:


Bradford Barrett Webalizer 2.0.1 -06

• Bradford Barrett sec-fix.patch
  ftp://ftp.mrunix.net/pub/webalizer/sec-fix.patch


• EnGarde Secure Linux 1.0.1 i386 webalizer-2.01-1.0.3.i386.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i386/webalizer-2 .01-1.0.3.i386.rpm


• EnGarde Secure Linux 1.0.1 i686 webalizer-2.01-1.0.3.i686.rpm
  ftp://ftp.engardelinux.org/pub/engarde/stable/updates/i686/webalizer-2 .01-1.0.3.i686.rpm


• Red Hat Inc. 7.0 alpha Powertools webalizer-2.01_09-0.70.alpha.rpm
  ftp://updates.redhat.com/7.0/en/powertools/alpha/webalizer-2.01_09-0.7 0.alpha.rpm


• Red Hat Inc. 7.0 i386 Powertools webalizer-2.01_09-0.70.i386.rpm
  ftp://updates.redhat.com/7.0/en/powertools/i386/webalizer-2.01_09-0.70 .i386.rpm


• Red Hat Inc. 7.1 alpha Powertools webalizer-2.01_09-0.71.alpha.rpm
  ftp://updates.redhat.com/7.1/en/powertools/alpha/webalizer-2.01_09-0.7 1.alpha.rpm


• Red Hat Inc. 7.1 i386 Powertools webalizer-2.01_09-0.71.i386.rpm
  ftp://updates.redhat.com/7.1/en/powertools/i386/webalizer-2.01_09-0.71 .i386.rpm


• S.u.S.E. 7.1 alpha webalizer-2.01.06-49.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/n2/webalizer-2.01.06-49.alp ha.rpm


• S.u.S.E. 7.1 i386 webalizer-2.01.06-139.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/n2/webalizer-2.01.06-139.i 386.rpm


• S.u.S.E. 7.1 ppc webalizer-2.01.06-70.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/n2/webalizer-2.01.06-70.ppc .rpm


• S.u.S.E. 7.1 sparc webalizer-2.01.06-54.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/n2/webalizer-2.01.06-54.s parc.rpm


• S.u.S.E. 7.2 i386 webalizer-2.01.06-139.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/n2/webalizer-2.01.06-139.i 386.rpm


• S.u.S.E. 7.3 i386 webalizer-2.01.06-140.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/n2/webalizer-2.01.06-140.i 386.rpm


• S.u.S.E. 7.3 ppc webalizer-2.01.06-72.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/n2/webalizer-2.01.06-72.ppc .rpm