CVE

Id
21546  
CVE No.
CVE-2006-5442  
Status
Candidate  
Description
ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks that inject arbitrary UTF-7 encoded JavaScript code via a view.  
Phase
Assigned (20061020)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
205572 21546 CVE-2006-5442 BUGTRAQ:20061015 Advisory 10/2006: ViewVC Undefined Charset UTF-7 XSS Vulnerability  View
205573 21546 CVE-2006-5442 URL:http://www.securityfocus.com/archive/1/archive/1/448762/100/0/threaded  View
205574 21546 CVE-2006-5442 MLIST:[announce] 20061013 ViewVC 1.0.3 released [SECURITY FIXES]  View
205575 21546 CVE-2006-5442 URL:http://viewvc.tigris.org/servlets/ReadMsg?list=announce&msgNo=5&raw=true  View
205576 21546 CVE-2006-5442 MISC:http://www.hardened-php.net/advisory_102006.134.html  View
205577 21546 CVE-2006-5442 CONFIRM:http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD  View
205578 21546 CVE-2006-5442 BID:20543  View
205579 21546 CVE-2006-5442 URL:http://www.securityfocus.com/bid/20543  View
205580 21546 CVE-2006-5442 SECUNIA:22395  View
205581 21546 CVE-2006-5442 URL:http://secunia.com/advisories/22395  View
205582 21546 CVE-2006-5442 SREASON:1755  View
205583 21546 CVE-2006-5442 URL:http://securityreason.com/securityalert/1755  View
205584 21546 CVE-2006-5442 XF:viewvc-utf7-xss(29576)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59149 JVNDB-2006-001415 Cisco SCCP 電話機で使用される Asterisk の Skinny チャネルドライバにおける整数オーバーフローの脆弱性 Cisco SCCP 電話機で使用される Asterisk の Skinny チャネルドライバ (chan_skinny.c) の get_input 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2006-5444 21546 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001415.html  View