FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-0085

This CVE name corresponds to:

Entered	Topic
2005-09-04	htdig -- cross site scripting vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-0085 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-0085
Phase	Assigned(20050118)

Description

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

References

Source	Reference
DEBIAN	DSA-680
FEDORA	FLSA-2006:152907
GENTOO	GLSA-200502-16
MANDRAKE	MDKSA-2005:063
REDHAT	RHSA-2005:073
REDHAT	RHSA-2005:090
SCO	SCOSA-2005.46
BID	12442
OVAL	oval:org.mitre.oval:def:10878
SECTRACK	1013078
SECUNIA	14255
SECUNIA	17414
SECUNIA	17415
SECUNIA	14276
SECUNIA	14303
SECUNIA	14795
SECUNIA	15007
XF	htdig-config-xss(19223)