Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-1175
HistoryMar 31, 2009 - 12:00 a.m.

CVE-2009-1175

2009-03-3100:00:00
ubuntu.com
ubuntu.com
10

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

48.5%

Cross-site scripting (XSS) vulnerability in apps/web/vs_diag.cgi in the
DAAP extension in Banshee 1.4.2 allows remote attackers to inject arbitrary
web script or HTML via the server parameter, which is not properly handled
in an error message.

Bugs

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.001

Percentile

48.5%

Related for UB:CVE-2009-1175