CVE

Id
3641  
CVE No.
CVE-2001-0835  
Status
Candidate  
Description
Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.  
Phase
Modified (20020226-01)  
Votes
ACCEPT(5) Armstrong, Baker, Bishop, Cole, Wall | MODIFY(1) Frech | NOOP(2) Christey, Foat  
Comments
Frech> XF:webalizer-html-tag-host(7350) | XF:webalizer-html-tags-keywords(7351) | Christey> ADDREF RHSA-2001:140 (per Mark Cox of Red Hat) | Christey> CONECTIVA:CLA-2001:435 | URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000435  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
16150 3641 CVE-2001-0835 BUGTRAQ:20011024 Cross-site Scripting Flaw in webalizer  View
16151 3641 CVE-2001-0835 URL:http://marc.info/?l=bugtraq&m=100394630702875&w=2  View
16152 3641 CVE-2001-0835 CONFIRM:http://www.mrunix.net/webalizer/news.html  View
16153 3641 CVE-2001-0835 SUSE:SuSE-SA:2001:040  View
16154 3641 CVE-2001-0835 URL:http://lists.suse.com/archives/suse-security-announce/2001-Nov/0001.html  View
16155 3641 CVE-2001-0835 REDHAT:RHSA-2001:140  View
16156 3641 CVE-2001-0835 URL:http://www.redhat.com/support/errata/RHSA-2001-140.html  View
16157 3641 CVE-2001-0835 REDHAT:RHSA-2001:141  View
16158 3641 CVE-2001-0835 URL:http://www.redhat.com/support/errata/RHSA-2001-141.html  View
16159 3641 CVE-2001-0835 ENGARDE:ESA-20011101-01  View
16160 3641 CVE-2001-0835 URL:http://www.linuxsecurity.com/advisories/other_advisory-1677.html  View
16161 3641 CVE-2001-0835 BID:3473  View
16162 3641 CVE-2001-0835 URL:http://www.securityfocus.com/bid/3473  View
16163 3641 CVE-2001-0835 XF:webalizer-html-tag-host(7350)  View
16164 3641 CVE-2001-0835 URL:http://xforce.iss.net/static/7350.php  View
16165 3641 CVE-2001-0835 XF:webalizer-html-tags-keywords(7351)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64188 JVNDB-2001-000162 Red hat Linux の webalizer におけるクロスサイトスクリプティングの脆弱性 Red hat Linux の webalizer において、ホスト名やキーワードに悪意のあるタグが挿入されていると、悪意のあるコードの実行を許可してしまう脆弱性が存在します。 CVE-2001-0835 3641 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000162.html  View