Lucene search

K
freebsdFreeBSD72F21372-55E4-11DB-A5AE-00508D6A62DF
HistorySep 30, 2006 - 12:00 a.m.

torrentflux -- User-Agent XSS Vulnerability

2006-09-3000:00:00
vuxml.freebsd.org
18

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.05 Low

EPSS

Percentile

92.9%

Steven Roddis reports that User-Agent string is not
properly escaped when handled by torrentflux. This allows
for arbitrary code insertion.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchtorrentflux= 0UNKNOWN

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.05 Low

EPSS

Percentile

92.9%

Related for 72F21372-55E4-11DB-A5AE-00508D6A62DF