7.5

CVE-2001-0835

EPSS 4.69%
Veröffentlicht 06.12.2001 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Bradford Barrett ≫ Webalizer Version <= 2.0.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.69%	0.883

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://lists.suse.com/archives/suse-security-announce/2001-Nov/0001.html

Patch

Vendor Advisory

http://marc.info/?l=bugtraq&m=100394630702875&w=2

http://www.linuxsecurity.com/advisories/other_advisory-1677.html

http://www.mrunix.net/webalizer/news.html

Patch

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2001-140.html

http://www.redhat.com/support/errata/RHSA-2001-141.html

Patch

Vendor Advisory

http://www.securityfocus.com/bid/3473

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7350

https://exchange.xforce.ibmcloud.com/vulnerabilities/7351

https://nvd.nist.gov/vuln/detail/CVE-2001-0835

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-0835

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-0835

EUVD