NVD

Id
2823  
Name
CVE-2008-2929  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-08-29  
Modified Date
2011-03-07  
Seq
2008-2929  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
17805 2823 CVE-2008-2929 SSRT080113  View
17806 2823 CVE-2008-2929 oval:org.mitre.oval:def:5877  View
17807 2823 CVE-2008-2929 1020772  View
17808 2823 CVE-2008-2929 http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.html  View
17809 2823 CVE-2008-2929 30870  View
17810 2823 CVE-2008-2929 ADV-2008-2480  View
17811 2823 CVE-2008-2929 rhds-dsgw-dsae-xss(44737)  View
17812 2823 CVE-2008-2929 https://bugzilla.redhat.com/show_bug.cgi?id=454621  View
17813 2823 CVE-2008-2929 RHSA-2008:0596  View
17814 2823 CVE-2008-2929 RHSA-2008:0601  View
17815 2823 CVE-2008-2929 FEDORA-2008-7642  View
17816 2823 CVE-2008-2929 FEDORA-2008-7339  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46357 JVNDB-2008-001667 Red Hat Directory Server の adminutil ライブラリにおけるクロスサイトスクリプティングの脆弱性 Red Hat Directory Server の Directory Server Administration Express および Directory Server Gateway (DSGW) ウェブインターフェースに実装されている adminutil ライブラリにおいて、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-2929 33042 CVE-2008-2929 2823 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001667.html 2008-08-29 2008-09-24 View