Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-0085

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

Published

2005-04-27T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application htdig htdig 3.1.5 Yes
Application htdig htdig 3.1.5_7 Yes
Application htdig htdig 3.1.5_8 Yes
Application htdig htdig 3.1.6 Yes
Application htdig htdig 3.2.0 Yes
Application htdig htdig 3.2.0b2 Yes
Application htdig htdig 3.2.0b3 Yes
Application htdig htdig 3.2.0b4 Yes
Application htdig htdig 3.2.0b5 Yes
Application htdig htdig 3.2.0b6 Yes
Operating System mandrakesoft mandrake_linux 10.0 Yes
Operating System mandrakesoft mandrake_linux 10.0 Yes
Operating System mandrakesoft mandrake_linux 10.1 Yes
Operating System mandrakesoft mandrake_linux 10.1 Yes
Operating System mandrakesoft mandrake_linux_corporate_server 2.1 Yes
Operating System mandrakesoft mandrake_linux_corporate_server 2.1 Yes
Operating System mandrakesoft mandrake_linux_corporate_server 3.0 Yes
Operating System mandrakesoft mandrake_linux_corporate_server 3.0 Yes
Operating System redhat fedora_core core_3.0 Yes
Operating System suse suse_linux 8.0 Yes
Operating System suse suse_linux 8.0 Yes
Operating System suse suse_linux 8.1 Yes
Operating System suse suse_linux 8.2 Yes
Operating System suse suse_linux 9.0 Yes
Operating System suse suse_linux 9.0 Yes
Operating System suse suse_linux 9.1 Yes
Operating System suse suse_linux 9.2 Yes
References