Skip to content
OpenAdvisories
Unscored DSA-2335-1 1 CVE

man2html - missing input sanitization

Published Nov 5, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 man2html 1.6f-3+lenny1
Debian · 6.0 man2html 1.6f+repack-1+squeeze1

Vulnerabilities 1

  • Unscored —

    Cross-site scripting (XSS) vulnerability in man2html.cgi.c in man2html 1.6, and possibly other version, allows remote a…