6.8

CVE-2005-0085

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Htdig ≫ Htdig Version3.1.5
Htdig ≫ Htdig Version3.1.5_7
Htdig ≫ Htdig Version3.1.5_8
Htdig ≫ Htdig Version3.1.6
Htdig ≫ Htdig Version3.2.0
Htdig ≫ Htdig Version3.2.0b2
Htdig ≫ Htdig Version3.2.0b3
Htdig ≫ Htdig Version3.2.0b4
Htdig ≫ Htdig Version3.2.0b5
Htdig ≫ Htdig Version3.2.0b6
Mandrakesoft ≫ Mandrake Linux Version10.0
Mandrakesoft ≫ Mandrake Linux Version10.0 Editionamd64
Mandrakesoft ≫ Mandrake Linux Version10.1
Mandrakesoft ≫ Mandrake Linux Version10.1 Editionx86_64
Mandrakesoft ≫ Mandrake Linux Corporate Server Version2.1 Editionx86_64
Mandrakesoft ≫ Mandrake Linux Corporate Server Version3.0 Editionx86_64
Redhat ≫ Fedora Core Versioncore_3.0
Suse ≫ Suse Linux Version8.0
Suse ≫ Suse Linux Version8.0 Editioni386
Suse ≫ Suse Linux Version8.1
Suse ≫ Suse Linux Version8.2
Suse ≫ Suse Linux Version9.0
Suse ≫ Suse Linux Version9.0 Editionx86_64
Suse ≫ Suse Linux Version9.1
Suse ≫ Suse Linux Version9.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.27% 0.808
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.redhat.com/support/errata/RHSA-2005-073.html
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt
http://secunia.com/advisories/14255
http://secunia.com/advisories/14276
http://secunia.com/advisories/14303
http://secunia.com/advisories/14795
http://secunia.com/advisories/15007
http://secunia.com/advisories/17414
http://secunia.com/advisories/17415
http://securitytracker.com/id?1013078
http://www.debian.org/security/2005/dsa-680
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:063
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html
http://www.redhat.com/support/errata/RHSA-2005-090.html
http://www.securityfocus.com/bid/12442
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19223
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878