Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-0085
HistoryApr 27, 2005 - 4:00 a.m.

CVE-2005-0085

2005-04-2704:00:00
[email protected]
web.nvd.nist.gov
32
cve
cross-site scripting
xss
ht://dig
vulnerability
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

JSON

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

Affected configurations

NVD
Node
htdightdigMatch3.1.5
OR
htdightdigMatch3.1.5_7
OR
htdightdigMatch3.1.5_8
OR
htdightdigMatch3.1.6
OR
htdightdigMatch3.2.0
OR
htdightdigMatch3.2.0b2
OR
htdightdigMatch3.2.0b3
OR
htdightdigMatch3.2.0b4
OR
htdightdigMatch3.2.0b5
OR
htdightdigMatch3.2.0b6
Node
mandrakesoftmandrake_linuxMatch10.0
OR
mandrakesoftmandrake_linuxMatch10.0amd64
OR
mandrakesoftmandrake_linuxMatch10.1
OR
mandrakesoftmandrake_linuxMatch10.1x86_64
OR
mandrakesoftmandrake_linux_corporate_serverMatch2.1
OR
mandrakesoftmandrake_linux_corporate_serverMatch2.1x86_64
OR
mandrakesoftmandrake_linux_corporate_serverMatch3.0
OR
mandrakesoftmandrake_linux_corporate_serverMatch3.0x86_64
OR
redhatfedora_coreMatchcore_3.0
OR
susesuse_linuxMatch8.0
OR
susesuse_linuxMatch8.0i386
OR
susesuse_linuxMatch8.1
OR
susesuse_linuxMatch8.2
OR
susesuse_linuxMatch9.0
OR
susesuse_linuxMatch9.0x86_64
OR
susesuse_linuxMatch9.1
OR
susesuse_linuxMatch9.2

Related

nessus 7
openvas 8
nvd 1
freebsd 1
gentoo 1
debiancve 1
redhat 1
osv 1
cvelist 1
securityvulns 1
ubuntucve 1
debian 2
nessus
nessus
SuSE9 Security Update : htdig (YOU Patch Number 9833)
2009-09-24 00:00:00
Debian DSA-680-1 : htdig - unsanitised input
2005-02-14 00:00:00
Mandrake Linux Security Advisory : htdig (MDKSA-2005:063)
2005-04-01 00:00:00
openvas
openvas
FreeBSD Ports: htdig
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200502-16 (htdig)
2008-09-24 00:00:00
SLES9: Security update for htdig
2009-10-10 00:00:00
nvd
nvd
CVE-2005-0085
2005-04-27 04:00:00
freebsd
freebsd
htdig -- cross site scripting vulnerability
2005-02-03 00:00:00
gentoo
gentoo
ht://Dig: Cross-site scripting vulnerability
2005-02-13 00:00:00
debiancve
debiancve
CVE-2005-0085
2005-04-27 04:00:00
redhat
redhat
(RHSA-2005:090) htdig security update
2005-02-15 00:00:00
osv
osv
htdig - unsanitised input
2005-02-14 00:00:00
cvelist
cvelist
CVE-2005-0085
2005-02-15 05:00:00
securityvulns
securityvulns
[Full-Disclosure] [ GLSA 200502-16 ] ht://Dig: Cross-site scripting vulnerability
2005-02-14 00:00:00
ubuntucve
ubuntucve
CVE-2005-0085
2005-04-27 00:00:00
debian
debian
[SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability
2005-02-14 14:21:23
[SECURITY] [DSA 680-1] New htdig packages fix cross-site scripting vulnerability
2005-02-14 14:21:23

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.7 Medium

AI Score

Confidence

High

0.023 Low

EPSS

Percentile

89.8%

JSON
Related for CVE-2005-0085
nessus7openvas8nvd1freebsd1gentoo1debiancve1redhat1osv1cvelist1securityvulns1ubuntucve1debian2