CVE

Id
11291  
CVE No.
CVE-2005-0085  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.  
Phase
Assigned (20050118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
79987 11291 CVE-2005-0085 DEBIAN:DSA-680  View
79988 11291 CVE-2005-0085 URL:http://www.debian.org/security/2005/dsa-680  View
79989 11291 CVE-2005-0085 FEDORA:FLSA-2006:152907  View
79990 11291 CVE-2005-0085 URL:http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html  View
79991 11291 CVE-2005-0085 GENTOO:GLSA-200502-16  View
79992 11291 CVE-2005-0085 URL:http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml  View
79993 11291 CVE-2005-0085 MANDRAKE:MDKSA-2005:063  View
79994 11291 CVE-2005-0085 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:063  View
79995 11291 CVE-2005-0085 REDHAT:RHSA-2005:073  View
79996 11291 CVE-2005-0085 URL:http://www.redhat.com/support/errata/RHSA-2005-073.html  View
79997 11291 CVE-2005-0085 REDHAT:RHSA-2005:090  View
79998 11291 CVE-2005-0085 URL:http://www.redhat.com/support/errata/RHSA-2005-090.html  View
79999 11291 CVE-2005-0085 SCO:SCOSA-2005.46  View
80000 11291 CVE-2005-0085 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt  View
80001 11291 CVE-2005-0085 BID:12442  View
80002 11291 CVE-2005-0085 URL:http://www.securityfocus.com/bid/12442  View
80003 11291 CVE-2005-0085 OVAL:oval:org.mitre.oval:def:10878  View
80004 11291 CVE-2005-0085 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10878  View
80005 11291 CVE-2005-0085 SECTRACK:1013078  View
80006 11291 CVE-2005-0085 URL:http://securitytracker.com/id?1013078  View
80007 11291 CVE-2005-0085 SECUNIA:14255  View
80008 11291 CVE-2005-0085 URL:http://secunia.com/advisories/14255  View
80009 11291 CVE-2005-0085 SECUNIA:17414  View
80010 11291 CVE-2005-0085 URL:http://secunia.com/advisories/17414  View
80011 11291 CVE-2005-0085 SECUNIA:17415  View
80012 11291 CVE-2005-0085 URL:http://secunia.com/advisories/17415  View
80013 11291 CVE-2005-0085 SECUNIA:14276  View
80014 11291 CVE-2005-0085 URL:http://secunia.com/advisories/14276  View
80015 11291 CVE-2005-0085 SECUNIA:14303  View
80016 11291 CVE-2005-0085 URL:http://secunia.com/advisories/14303  View
80017 11291 CVE-2005-0085 SECUNIA:14795  View
80018 11291 CVE-2005-0085 URL:http://secunia.com/advisories/14795  View
80019 11291 CVE-2005-0085 SECUNIA:15007  View
80020 11291 CVE-2005-0085 URL:http://secunia.com/advisories/15007  View
80021 11291 CVE-2005-0085 XF:htdig-config-xss(19223)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61809 JVNDB-2005-000011 Red Hat Enterprise Linux の alsa-lib Stack におけるスタック実行保護機能を無効の脆弱性 Red Hat Enterprise Linux に含まれている alsa-lib は、src/mixer/mixer.c にセキュリティ上の不備が存在し、libasound.so ライブラリにおいて、スタック実行保護が無効となる脆弱性が存在します。 CVE-2005-0087 11291 4.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000011.html  View