CVE

Id
33046  
CVE No.
CVE-2008-2929  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping.  
Phase
Assigned (20080630)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
358679 33046 CVE-2008-2929 CONFIRM:http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html  View
358680 33046 CVE-2008-2929 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=454621  View
358681 33046 CVE-2008-2929 FEDORA:FEDORA-2008-7339  View
358682 33046 CVE-2008-2929 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.html  View
358683 33046 CVE-2008-2929 FEDORA:FEDORA-2008-7642  View
358684 33046 CVE-2008-2929 URL:https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.html  View
358685 33046 CVE-2008-2929 HP:HPSBUX02354  View
358686 33046 CVE-2008-2929 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861  View
358687 33046 CVE-2008-2929 HP:SSRT080113  View
358688 33046 CVE-2008-2929 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861  View
358689 33046 CVE-2008-2929 REDHAT:RHSA-2008:0596  View
358690 33046 CVE-2008-2929 URL:https://rhn.redhat.com/errata/RHSA-2008-0596.html  View
358691 33046 CVE-2008-2929 REDHAT:RHSA-2008:0601  View
358692 33046 CVE-2008-2929 URL:https://rhn.redhat.com/errata/RHSA-2008-0601.html  View
358693 33046 CVE-2008-2929 BID:30870  View
358694 33046 CVE-2008-2929 URL:http://www.securityfocus.com/bid/30870  View
358695 33046 CVE-2008-2929 OVAL:oval:org.mitre.oval:def:5877  View
358696 33046 CVE-2008-2929 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5877  View
358697 33046 CVE-2008-2929 VUPEN:ADV-2008-2480  View
358698 33046 CVE-2008-2929 URL:http://www.vupen.com/english/advisories/2008/2480  View
358699 33046 CVE-2008-2929 SECTRACK:1020772  View
358700 33046 CVE-2008-2929 URL:http://securitytracker.com/id?1020772  View
358701 33046 CVE-2008-2929 SECUNIA:31777  View
358702 33046 CVE-2008-2929 URL:http://secunia.com/advisories/31777  View
358703 33046 CVE-2008-2929 SECUNIA:31565  View
358704 33046 CVE-2008-2929 URL:http://secunia.com/advisories/31565  View
358705 33046 CVE-2008-2929 SECUNIA:31612  View
358706 33046 CVE-2008-2929 URL:http://secunia.com/advisories/31612  View
358707 33046 CVE-2008-2929 SECUNIA:31702  View
358708 33046 CVE-2008-2929 URL:http://secunia.com/advisories/31702  View
358709 33046 CVE-2008-2929 XF:rhds-dsgw-dsae-xss(44737)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46257 JVNDB-2008-001567 Mozilla Firefox における任意のローカルファイルを読み取られる脆弱性 Mozilla Firefox には、マルチタブを開くためのリクエストとしてコマンドライン URI 内の "|" (パイプ) 文字を解釈することにより、chrome:i URI にアクセスされる、または任意のローカルファイルを読み取られる脆弱性が存在します。 CVE-2008-2933 33046 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001567.html  View