NVD

Id
57561  
Name
CVE-2007-5496  
Description
Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2008-05-23  
Modified Date
2010-08-21  
Seq
2007-5496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294496 57561 CVE-2007-5496 oval:org.mitre.oval:def:10455  View
294497 57561 CVE-2007-5496 1020078  View
294498 57561 CVE-2007-5496 RHSA-2008:0061  View
294499 57561 CVE-2007-5496 29324  View
294500 57561 CVE-2007-5496 setroubleshoot-sealert-avc-xss(42592)  View
294501 57561 CVE-2007-5496 https://bugzilla.redhat.com/show_bug.cgi?id=288271  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46071 JVNDB-2008-001381 setroubleshoot におけるクロスサイトスクリプティングの脆弱性 setroubleshoot には、ファイル名またはプロセス名の扱いに不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-5496 28851 CVE-2007-5496 57561 1.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001381.html 2008-05-20 2008-06-13 View