6.8

CVE-2005-0085

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Htdig ≫ Htdig Version 3.1.5
Htdig ≫ Htdig Version 3.1.5_7
Htdig ≫ Htdig Version 3.1.5_8
Htdig ≫ Htdig Version 3.1.6
Htdig ≫ Htdig Version 3.2.0
Htdig ≫ Htdig Version 3.2.0b2
Htdig ≫ Htdig Version 3.2.0b3
Htdig ≫ Htdig Version 3.2.0b4
Htdig ≫ Htdig Version 3.2.0b5
Htdig ≫ Htdig Version 3.2.0b6
Mandrakesoft ≫ Mandrake Linux Version 10.0
Mandrakesoft ≫ Mandrake Linux Version 10.0 Edition amd64
Mandrakesoft ≫ Mandrake Linux Version 10.1
Mandrakesoft ≫ Mandrake Linux Version 10.1 Edition x86_64
Mandrakesoft ≫ Mandrake Linux Corporate Server Version 2.1 Edition x86_64
Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0 Edition x86_64
Redhat ≫ Fedora Core Version core_3.0
Suse ≫ Suse Linux Version 8.0
Suse ≫ Suse Linux Version 8.0 Edition i386
Suse ≫ Suse Linux Version 8.1
Suse ≫ Suse Linux Version 8.2
Suse ≫ Suse Linux Version 9.0
Suse ≫ Suse Linux Version 9.0 Edition x86_64
Suse ≫ Suse Linux Version 9.1
Suse ≫ Suse Linux Version 9.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.27% 0.808
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.redhat.com/support/errata/RHSA-2005-073.html
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt
http://secunia.com/advisories/14255
http://secunia.com/advisories/14276
http://secunia.com/advisories/14303
http://secunia.com/advisories/14795
http://secunia.com/advisories/15007
http://secunia.com/advisories/17414
http://secunia.com/advisories/17415
http://securitytracker.com/id?1013078
http://www.debian.org/security/2005/dsa-680
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:063
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html
http://www.redhat.com/support/errata/RHSA-2005-090.html
http://www.securityfocus.com/bid/12442
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19223
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878