NVD

Id
69559  
Name
CVE-2005-3921  
Description
Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memory buffers, as demonstrated by the URI /level/15/exec/-/buffers/assigned/dump; or (2) sending the router Cisco Discovery Protocol (CDP) packets with HTML payload that an administrator views via the CDP status pages. NOTE: these vectors were originally reported as being associated with the dump and packet options in /level/15/exec/-/show/buffers.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-11-30  
Modified Date
2011-03-07  
Seq
2005-3921  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
359582 69559 CVE-2005-3921 oval:org.mitre.oval:def:5867  View
359583 69559 CVE-2005-3921 227  View
359584 69559 CVE-2005-3921 1015275  View
359585 69559 CVE-2005-3921 20051201 IOS HTTP Server Command Injection Vulnerability  View
359586 69559 CVE-2005-3921 20060117 Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability  View
359587 69559 CVE-2005-3921 http://www.infohacking.com/INFOHACKING_RESEARCH/Our_Advisories/cisco/index.html  View
359588 69559 CVE-2005-3921 20051128 - Cisco IOS HTTP Server code injection/execution vulnerability-  View
359589 69559 CVE-2005-3921 15602  View
359590 69559 CVE-2005-3921 16291  View
359591 69559 CVE-2005-3921 ADV-2005-2657  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62507 JVNDB-2005-000709 Cisco IOS HTTP Server における任意のコマンドを挿入されるの脆弱性 Cisco IOS に含まれる HTTP Server には、show buffers コマンドなどによりメモリダンプ結果を動的に生成した Web ページを表示する際に、出力結果のサニタイズ処理が適切に行われていないため、任意のコマンドを挿入される脆弱性が存在します。 CVE-2005-3921 15123 CVE-2005-3921 69559 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000709.html 2005-11-28 2007-04-01 View