CVE

Id
43024  
CVE No.
CVE-2010-0440  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html.  
Phase
Assigned (20100127)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
469261 43024 CVE-2010-0440 BUGTRAQ:20100201 [CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection  View
469262 43024 CVE-2010-0440 URL:http://www.securityfocus.com/archive/1/archive/1/509290/100/0/threaded  View
469263 43024 CVE-2010-0440 MISC:http://www.coresecurity.com/content/cisco-secure-desktop-xss  View
469264 43024 CVE-2010-0440 CONFIRM:http://tools.cisco.com/security/center/viewAlert.x?alertId=19843  View
469265 43024 CVE-2010-0440 BID:37960  View
469266 43024 CVE-2010-0440 URL:http://www.securityfocus.com/bid/37960  View
469267 43024 CVE-2010-0440 SECUNIA:38397  View
469268 43024 CVE-2010-0440 URL:http://secunia.com/advisories/38397  View
469269 43024 CVE-2010-0440 VUPEN:ADV-2010-0273  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38688 JVNDB-2010-004473 Solaris 上で稼動する HP Operations Agent における任意のコードを実行される脆弱性 Solaris 上で稼動する HP Operations Agent は、opc_op アカウントに対して空白のパスワードを使用するため、任意のコードを実行される脆弱性が存在します。 CVE-2010-0444 43024 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004473.html  View