MHonArc HTML Script Filter Bypass Vulnerability

Bugtraq ID:	4546
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 18 2002 12:00AM
Updated:	Apr 18 2002 12:00AM
Credit:	Credited to Jason Molenda and Hiromitsu Takagi <[email protected]>.
Vulnerable:	MHonArc MHonArc 2.5.11 MHonArc MHonArc 2.5.2 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 MHonArc MHonArc 2.5.1 MHonArc MHonArc 2.5 MHonArc MHonArc 2.4.4 + Debian Linux 2.2 pre potato + Debian Linux 2.2 sparc + Debian Linux 2.2 powerpc + Debian Linux 2.2 IA-32 + Debian Linux 2.2 arm + Debian Linux 2.2 alpha + Debian Linux 2.2 68k + Debian Linux 2.2
Not Vulnerable:	MHonArc MHonArc 2.5.3

MHonArc HTML Script Filter Bypass Vulnerability

Solution:
Updated versions are available:


MHonArc MHonArc 2.5

• MHonArc MHonArc2.5.3.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.3.tar.gz

MHonArc MHonArc 2.5.1

• MHonArc MHonArc2.5.3.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.3.tar.gz

MHonArc MHonArc 2.5.2

• Debian mhonarc_ 2.5.2-1.1_all.deb
  For the stable stable distribution (woody)
  http://security.debian.org/pool/updates/main/m/mhonarc/mhonarc_2.5.2-1 .1_all.deb


• MHonArc MHonArc2.5.3.tar.gz
  http://www.mhonarc.org/tar/MHonArc2.5.3.tar.gz