SecurityFocus

[DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Feb 26 2009 04:40PM
Digital Security Research Group (research dsec ru) (1 replies)

Re: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Feb 26 2009 06:46PM
Vladimir '3APA3A' Dubrovin (3APA3A SECURITY NNOV RU) (2 replies)

Dear Digital Security Research Group,

--Thursday, February 26, 2009, 7:40:50 PM, you wrote to bugtraq (at) securityfocus (dot) com [email concealed]:

DSRG> Application: APC PowerChute Network Shutdown's Web Interface
DSRG> Vendor URL: http://www.apc.com/
DSRG> Bug: XSS/Response Splitting

DSRG> Solution: Use Firewall

Just wonder: how can firewall to protect against XSS/response splitting?

--
Skype: Vladimir.Dubrovin
~/ZARAZA http://securityvulns.com/

[ reply ]

Re[2]: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Feb 27 2009 09:59AM
Alexandr Polyakov (alexandr polyakov dsec ru)

Re: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Feb 26 2009 09:15PM
Ansgar Wiechers (bugtraq planetcobalt net) (1 replies)

Re[2]: [DSECRG-09-009] APC PowerChute Network Shutdown's Web Interface - XSS vulnerability Feb 27 2009 06:38AM
Vladimir '3APA3A' Dubrovin (3APA3A SECURITY NNOV RU)