CVE-2005-0085
Published Apr 27, 2005
Last updated 7 years ago
Overview
- Description
- Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Vendor comments
- Red HatNot vulnerable. These issues did not affect the versions of htdig as shipped with Red Hat Enterprise Linux 2.1, 3, or 4. http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=144263
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:htdig:htdig:3.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB1B424C-CCA5-41F5-A022-A57F31E5A8CA"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.1.5_7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2ED8D3ED-DC4B-4D4E-B0C3-61A5723C4EF5"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.1.5_8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "447995AE-E56D-4C78-9842-D0C380D5B36E"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A8A8C9D-5667-42CB-8C6D-9FB6896E05C3"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04A77C93-4737-451F-95FA-529D706E5E8E"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.2.0b2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFC385F4-2846-48F4-8BE1-403B9CE362AA"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.2.0b3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74EBEB9A-82D9-4B18-85F3-85A8C8CB3D7B"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.2.0b4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EEF5A3E-91AF-4D19-887A-2629432B7873"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.2.0b5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52B7F9FD-8F58-4ACF-9787-4EBF906C1623"
},
{
"criteria": "cpe:2.3:a:htdig:htdig:3.2.0b6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53C1D7AC-17E8-480C-B2B4-F76F13691494"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3528DABD-B821-4D23-AE12-614A9CA92C46"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E661D58-18DF-4CCF-9892-F873618F4535"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0F0D201-B1DC-4024-AF77-A284673618F3"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "052E3862-BFB7-42E7-889D-8590AFA8EF37"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BB0B27C-04EA-426F-9016-7406BACD91DF"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"
},
{
"criteria": "cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC80CF67-C51D-442C-9526-CFEDE84A6304"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28CD54FE-D682-4063-B7C3-8B29B26B39AD"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37F124FE-15F1-49D7-9E03-8E036CE1A20C"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8C55338-3372-413F-82E3-E1B476D6F41A"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56EF103F-5668-4754-A83B-D3662D0CE815"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFABFCE5-4F86-4AE8-9849-BC360AC72098"
},
{
"criteria": "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"
}
],
"operator": "OR"
}
]
}
]