CVE-2005-0085

7 documents7 sources
Severity
6.8MEDIUM
EPSS
4.7%
top 10.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Htdig HtdigMandrakesoft Mandrake LinuxMandrakesoft Mandrake Linux Corporate Server+2 more
Timeline
PublishedApr 27
Latest updateMay 3

Description

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages6 packages

▶Debianhtdig< 1:3.1.6-11+3
▶NVDhtdig/htdig10 versions+9
▶NVDsuse/suse_linux6 versions+5
▶NVDredhat/fedora_corecore_3.0
▶NVDmandrakesoft/mandrake_linux10.0, 10.1+1

Patches

Patch: www.debian.org ↗Patch: www.securityfocus.com ↗Patch: www.debian.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-qpr6-prp3-323r: Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3↗2022-05-03
▶
OSV
CVE-2005-0085: Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3↗2005-04-27
▶
CVEList
CVE-2005-0085: Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3↗2005-02-15
▶

📋Vendor Advisories

2
Red Hat
security flaw↗2005-12-03
▶
Debian
CVE-2005-0085: htdig - Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 all...↗2005
▶

💬Community

1
Bugzilla
CVE-2005-0085 security flaw↗2018-08-16
▶