CVE

Id
14961  
CVE No.
CVE-2005-3757  
Status
Candidate  
Description
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.  
Phase
Assigned (20051122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
115938 14961 CVE-2005-3757 BUGTRAQ:20051121 Google Search Appliance proxystylesheet Flaws  View
115939 14961 CVE-2005-3757 URL:http://www.securityfocus.com/archive/1/archive/1/417310/30/0/threaded  View
115940 14961 CVE-2005-3757 MISC:http://metasploit.com/research/vulns/google_proxystylesheet/  View
115941 14961 CVE-2005-3757 BID:15509  View
115942 14961 CVE-2005-3757 URL:http://www.securityfocus.com/bid/15509  View
115943 14961 CVE-2005-3757 VUPEN:ADV-2005-2500  View
115944 14961 CVE-2005-3757 URL:http://www.vupen.com/english/advisories/2005/2500  View
115945 14961 CVE-2005-3757 OSVDB:20981  View
115946 14961 CVE-2005-3757 URL:http://www.osvdb.org/20981  View
115947 14961 CVE-2005-3757 SECTRACK:1015246  View
115948 14961 CVE-2005-3757 URL:http://securitytracker.com/id?1015246  View
115949 14961 CVE-2005-3757 SECUNIA:17644  View

Related JVN