Bug#340583: CVE-2005-3745: Cross-Site-Scriping vulnerability

[Moritz Muehlenhoff]

Package: libstruts1.2-java
Severity: grave
Tags: security
Justification: user security hole

A Cross-Site-Scriping vulnerability has been found in the request handler
for generating error messages. Please see 
http://www.securityfocus.com/archive/1/archive/1/417296/30/0/threaded for
more details.

It's been fixed upstream in 1.2.8.

This has been assigned CVE-2005-3745, please mention it in the changelog
when fixing it.

Cheers,
        Moritz

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14-2-686
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)