WebSphere/VisualAge CSS Vulnerability - Lotus Domino CSS Vulnerability

[Jim Langston <jimlangston@xxxxxxxxxxxxxxxx>]

Couple of possible AS/400 vulnerabilities I thought you should all
be aware of.  I have not confirmed these, just saw them in a security
alert newsletter I get periodically.

*** {01.27.037} Cross - WebSphere/VisualAge CSS vulnerability

IBM WebSphere versions 3.5 and 3.02, as well as IBM VisualAge version
3.5, have been found vulnerable to a Cross-Site Scripting attack. This
potentially allows a malicious e-mail or Web site to execute active
scripting in a user's browser via the vulnerable WebSphere site.

The advisory indicates vendor confirmation. A fix is available at:
http://www-4.ibm.com/software/Webservers/appserv/efix.html

Source: SecurityFocus Bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-07/0021.html

*** {01.27.038} Cross - Lotus Domino CSS vulnerability

Lotus Domino server version 5.0.6 has been found vulnerable to a
Cross-Site Scripting attack. This potentially allows a malicious e-mail
or Web site to execute active scripting in a user's browser via the
vulnerable Domino site.

This vulnerability has not been confirmed.

Source: SecurityFocus Bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-07/0022.html

-----------------------------------------------------------------------

Become a Security Alert Consensus member! If this e-mail was passed to
you and you would like to begin receiving our security e-mail newsletter
on a weekly basis, we invite you to subscribe today.
http://www.networkcomputing.com/consensus/.


-- 


Regards,

Jim Langston

Me transmitte sursum, Caledoni!
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---