CVE:CVE-2004-1100
CNNVD:CNNVD-200501-031
MailPost是一个32位Windows系统中WebServer的CGI程序。
MailPost 5.1.1sv及之前版本的mailpost.exe存在跨站点脚本攻击漏洞。
启用debug模式时，远程攻击者可利用append参数执行任意的web脚本或HTML。
solution:Upgrade tips mailpost to a higher version than 5.1.1sv,and avoid the version 5.1.1sv
solution:Upgrade ethereal_group ethereal to a higher version than 0.8.13,0.8.14,0.8.15,0.8.16,0.8.17a,0.8.18,0.8.19,0.8.20,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10.0,0.10.0a,0.10.1,0.10.2,and avoid the version 0.8.13,0.8.14,0.8.15,0.8.16,0.8.17a,0.8.18,0.8.19,0.8.20,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.10.0,0.10.0a,0.10.1,0.10.2