linux/meta-security.git/recipes-security/nikto/files, branch test Mirror of git.yoctoproject.org/meta-security.git https://git.enea.com/cgit/linux/meta-security.git/atom?h=test 2019-01-06T16:02:28+00:00 nikto: upgrade to 2.1.6 (v2) 2019-01-06T16:02:28+00:00 Scott Ellis scottellis.developer@gmail.com 2018-12-28T21:35:35+00:00 urn:sha1:b4441953a586910c6a30ef1218396d133d6bf14e Source now on github. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> CVE-2018-11652 nikto: arbitray OS command injection via http server field. 2018-07-03T22:30:51+00:00 Nagalakshmi Veeramallu nveeramallu@mvista.com 2018-06-29T10:08:25+00:00 urn:sha1:a1406fe1c88308da81af907d11d21e2c03ee0c01 CSV Injection vulnerability in Nikto 2.1.6 and earlier allows remote attackers to inject arbitrary OS commands via the Server field in an HTTP response header, which is directly injected into a CSV report. Signed-off-by: Nagalakshmi Veeramallu <nveeramallu@mvista.com> Reviewed-by: Jagadeesh Krishnanjanappa <jkrishnanjanappa@mvista.com> Signed-off-by: Armin Kuster <akuster@mvista.com> Security layer version 1.0 2013-07-10T13:41:44+00:00 Andrei Dinu andrei.adrianx.dinu@intel.com 2013-07-10T13:41:44+00:00 urn:sha1:d54c9d7dadfddcd60ca11be23c5a2946f8a1b385 Signed-off-by: Andrei Dinu <andrei.adrianx.dinu@intel.com>