Lucene search
HistoryJan 16, 2009 - 9:30 p.m.
CVE-2008-3821
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to the ping program or (2) unspecified other aspects of the URI.
Affected configurations
Node
ciscoiosMatch12.0
ORciscoiosMatch12.0da
ORciscoiosMatch12.0db
ORciscoiosMatch12.0dc
ORciscoiosMatch12.0s
ORciscoiosMatch12.0sc
ORciscoiosMatch12.0sl
ORciscoiosMatch12.0sp
ORciscoiosMatch12.0st
ORciscoiosMatch12.0sx
ORciscoiosMatch12.0sy
ORciscoiosMatch12.0sz
ORciscoiosMatch12.0t
ORciscoiosMatch12.0w
ORciscoiosMatch12.0wc
ORciscoiosMatch12.0xa
ORciscoiosMatch12.0xb
ORciscoiosMatch12.0xc
ORciscoiosMatch12.0xd
ORciscoiosMatch12.0xe
ORciscoiosMatch12.0xg
ORciscoiosMatch12.0xh
ORciscoiosMatch12.0xi
ORciscoiosMatch12.0xj
ORciscoiosMatch12.0xk
ORciscoiosMatch12.0xl
ORciscoiosMatch12.0xm
ORciscoiosMatch12.0xn
ORciscoiosMatch12.0xq
ORciscoiosMatch12.0xr
ORciscoiosMatch12.0xs
ORciscoiosMatch12.0xt
ORciscoiosMatch12.0xv
ORciscoiosMatch12.1
ORciscoiosMatch12.1aa
ORciscoiosMatch12.1ax
ORciscoiosMatch12.1ay
ORciscoiosMatch12.1cx
ORciscoiosMatch12.1da
ORciscoiosMatch12.1db
ORciscoiosMatch12.1dc
ORciscoiosMatch12.1eb
ORciscoiosMatch12.1ec
ORciscoiosMatch12.1eo
ORciscoiosMatch12.1eu
ORciscoiosMatch12.1ew
ORciscoiosMatch12.1ex
ORciscoiosMatch12.1ey
ORciscoiosMatch12.1ez
ORciscoiosMatch12.1ga
ORciscoiosMatch12.1gb
ORciscoiosMatch12.1t
ORciscoiosMatch12.1xa
ORciscoiosMatch12.1xb
ORciscoiosMatch12.1xc
ORciscoiosMatch12.1xd
ORciscoiosMatch12.1xe
ORciscoiosMatch12.1xf
ORciscoiosMatch12.1xg
ORciscoiosMatch12.1xh
ORciscoiosMatch12.1xi
ORciscoiosMatch12.1xj
ORciscoiosMatch12.1xl
ORciscoiosMatch12.1xm
ORciscoiosMatch12.1xp
ORciscoiosMatch12.1xq
ORciscoiosMatch12.1xr
ORciscoiosMatch12.1xs
ORciscoiosMatch12.1xt
ORciscoiosMatch12.1xu
ORciscoiosMatch12.1xv
ORciscoiosMatch12.1xw
ORciscoiosMatch12.1xx
ORciscoiosMatch12.1xy
ORciscoiosMatch12.1xz
ORciscoiosMatch12.1ya
ORciscoiosMatch12.1yb
ORciscoiosMatch12.1yc
ORciscoiosMatch12.1yd
ORciscoiosMatch12.1ye
ORciscoiosMatch12.1yf
ORciscoiosMatch12.1yh
ORciscoiosMatch12.1yi
ORciscoiosMatch12.1yj
ORciscoiosMatch12.2
ORciscoiosMatch12.2b
ORciscoiosMatch12.2bc
ORciscoiosMatch12.2bw
ORciscoiosMatch12.2bx
ORciscoiosMatch12.2by
ORciscoiosMatch12.2bz
ORciscoiosMatch12.2cx
ORciscoiosMatch12.2cy
ORciscoiosMatch12.2cz
ORciscoiosMatch12.2da
ORciscoiosMatch12.2dd
ORciscoiosMatch12.2dx
ORciscoiosMatch12.2ew
ORciscoiosMatch12.2ewa
ORciscoiosMatch12.2ex
ORciscoiosMatch12.2ey
ORciscoiosMatch12.2ez
ORciscoiosMatch12.2fx
ORciscoiosMatch12.2fy
ORciscoiosMatch12.2fz
ORciscoiosMatch12.2ixa
ORciscoiosMatch12.2ixb
ORciscoiosMatch12.2ixc
ORciscoiosMatch12.2ixd
ORciscoiosMatch12.2ixe
ORciscoiosMatch12.2ixf
ORciscoiosMatch12.2ixg
ORciscoiosMatch12.2ja
ORciscoiosMatch12.2jk
ORciscoiosMatch12.2mb
ORciscoiosMatch12.2mc
ORciscoiosMatch12.2s
ORciscoiosMatch12.2sb
ORciscoiosMatch12.2sbc
ORciscoiosMatch12.2se
ORciscoiosMatch12.2sea
ORciscoiosMatch12.2seb
ORciscoiosMatch12.2sec
ORciscoiosMatch12.2sed
ORciscoiosMatch12.2see
ORciscoiosMatch12.2sef
ORciscoiosMatch12.2seg
ORciscoiosMatch12.2sg
ORciscoiosMatch12.2sga
ORciscoiosMatch12.2sm
ORciscoiosMatch12.2so
ORciscoiosMatch12.2sr
ORciscoiosMatch12.2sra
ORciscoiosMatch12.2srb
ORciscoiosMatch12.2su
ORciscoiosMatch12.2sv
ORciscoiosMatch12.2sva
ORciscoiosMatch12.2svc
ORciscoiosMatch12.2svd
ORciscoiosMatch12.2sve
ORciscoiosMatch12.2sw
ORciscoiosMatch12.2sx
ORciscoiosMatch12.2sxa
ORciscoiosMatch12.2sxb
ORciscoiosMatch12.2sxd
ORciscoiosMatch12.2sxe
ORciscoiosMatch12.2sxf
ORciscoiosMatch12.2sy
ORciscoiosMatch12.2sz
ORciscoiosMatch12.2t
ORciscoiosMatch12.2tpc
ORciscoiosMatch12.2xa
ORciscoiosMatch12.2xb
ORciscoiosMatch12.2xc
ORciscoiosMatch12.2xd
ORciscoiosMatch12.2xe
ORciscoiosMatch12.2xf
ORciscoiosMatch12.2xg
ORciscoiosMatch12.2xh
ORciscoiosMatch12.2xi
ORciscoiosMatch12.2xj
ORciscoiosMatch12.2xk
ORciscoiosMatch12.2xl
ORciscoiosMatch12.2xm
ORciscoiosMatch12.2xn
ORciscoiosMatch12.2xo
ORciscoiosMatch12.2xq
ORciscoiosMatch12.2xr
ORciscoiosMatch12.2xs
ORciscoiosMatch12.2xt
ORciscoiosMatch12.2xu
ORciscoiosMatch12.2xv
ORciscoiosMatch12.2xw
ORciscoiosMatch12.2ya
ORciscoiosMatch12.2yb
ORciscoiosMatch12.2yc
ORciscoiosMatch12.2yd
ORciscoiosMatch12.2ye
ORciscoiosMatch12.2yf
ORciscoiosMatch12.2yg
ORciscoiosMatch12.2yh
ORciscoiosMatch12.2yj
ORciscoiosMatch12.2yk
ORciscoiosMatch12.2yl
ORciscoiosMatch12.2ym
ORciscoiosMatch12.2yn
ORciscoiosMatch12.2yo
ORciscoiosMatch12.2yp
ORciscoiosMatch12.2yq
ORciscoiosMatch12.2yr
ORciscoiosMatch12.2yt
ORciscoiosMatch12.2yu
ORciscoiosMatch12.2yv
ORciscoiosMatch12.2yw
ORciscoiosMatch12.2yx
ORciscoiosMatch12.2yy
ORciscoiosMatch12.2yz
ORciscoiosMatch12.2za
ORciscoiosMatch12.2zb
ORciscoiosMatch12.2zc
ORciscoiosMatch12.2zd
ORciscoiosMatch12.2ze
ORciscoiosMatch12.2zf
ORciscoiosMatch12.2zg
ORciscoiosMatch12.2zh
ORciscoiosMatch12.2zj
ORciscoiosMatch12.2zl
ORciscoiosMatch12.2zp
ORciscoiosMatch12.2zu
ORciscoiosMatch12.2zx
ORciscoiosMatch12.2zy
ORciscoiosMatch12.2zya
ORciscoiosMatch12.3
ORciscoiosMatch12.3b
ORciscoiosMatch12.3bc
ORciscoiosMatch12.3bw
ORciscoiosMatch12.3ja
ORciscoiosMatch12.3jea
ORciscoiosMatch12.3jeb
ORciscoiosMatch12.3jec
ORciscoiosMatch12.3jk
ORciscoiosMatch12.3jl
ORciscoiosMatch12.3jx
ORciscoiosMatch12.3t
ORciscoiosMatch12.3tpc
ORciscoiosMatch12.3va
ORciscoiosMatch12.3xa
ORciscoiosMatch12.3xb
ORciscoiosMatch12.3xc
ORciscoiosMatch12.3xd
ORciscoiosMatch12.3xe
ORciscoiosMatch12.3xg
ORciscoiosMatch12.3xi
ORciscoiosMatch12.3xj
ORciscoiosMatch12.3xk
ORciscoiosMatch12.3xl
ORciscoiosMatch12.3xq
ORciscoiosMatch12.3xr
ORciscoiosMatch12.3xs
ORciscoiosMatch12.3xu
ORciscoiosMatch12.3xw
ORciscoiosMatch12.3xx
ORciscoiosMatch12.3xy
ORciscoiosMatch12.3xz
ORciscoiosMatch12.3ya
ORciscoiosMatch12.3yd
ORciscoiosMatch12.3yf
ORciscoiosMatch12.3yg
ORciscoiosMatch12.3yh
ORciscoiosMatch12.3yi
ORciscoiosMatch12.3yj
ORciscoiosMatch12.3yk
ORciscoiosMatch12.3ym
ORciscoiosMatch12.3yq
ORciscoiosMatch12.3ys
ORciscoiosMatch12.3yt
ORciscoiosMatch12.3yu
ORciscoiosMatch12.3yx
ORciscoiosMatch12.3yz
ORciscoiosMatch12.3za
ORciscoiosMatch12.4
ORciscoiosMatch12.4ja
ORciscoiosMatch12.4jda
ORciscoiosMatch12.4jk
ORciscoiosMatch12.4jl
ORciscoiosMatch12.4jma
ORciscoiosMatch12.4jmb
ORciscoiosMatch12.4jx
ORciscoiosMatch12.4md
ORciscoiosMatch12.4mr
ORciscoiosMatch12.4sw
ORciscoiosMatch12.4t
ORciscoiosMatch12.4xa
ORciscoiosMatch12.4xb
ORciscoiosMatch12.4xc
ORciscoiosMatch12.4xd
ORciscoiosMatch12.4xe
ORciscoiosMatch12.4xg
ORciscoiosMatch12.4xj
ORciscoiosMatch12.4xk
ORciscoiosMatch12.4xp
ORciscoiosMatch12.4xt
ORciscoiosMatch12.4xv
ORciscoiosMatch12.4xw
References
jvn.jp/en/jp/JVN28344798/index.html
osvdb.org/51393
osvdb.org/51394
secunia.com/advisories/33461
securityreason.com/securityalert/4916
securitytracker.com/id?1021598
www.cisco.com/en/US/products/products_security_response09186a0080a5c501.html
www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-19
www.securityfocus.com/archive/1/500063/100/0/threaded
www.securityfocus.com/bid/33260
www.vupen.com/english/advisories/2009/0138
exchange.xforce.ibmcloud.com/vulnerabilities/47947
Related
jvn
jvn
JVN#28344798 Cisco IOS cross-site scripting vulnerability
2009-01-15 00:00:00
cvelist
cvelist
CVE-2008-3821
2009-01-16 21:00:00
CVE-2009-0470
2009-02-06 19:00:00
cve
cve
CVE-2008-3821
2009-01-16 21:30:03
CVE-2009-0470
2009-02-06 19:30:00
securityvulns
securityvulns
Cisco IOS crossite scripting
2009-02-05 00:00:00
Cisco Security Response: Cisco IOS Cross-Site Scripting Vulnerabilities
2009-01-16 00:00:00
PR08-19: XSS on Cisco IOS HTTP Server
2009-01-16 00:00:00
cisco
cisco
Cisco IOS HTTP Server Ping Parameter Cross-Site Scripting Vulnerability
2009-01-14 16:58:09
prion
prion
Cross site scripting
2009-01-16 21:30:00
Cross site scripting
2009-02-06 19:30:00
packetstorm
packetstorm
ProCheckUp Security Advisory 2008.19
2009-01-15 00:00:00
nessus
nessus
Cisco IOS XSS and XSRF Vulnerabilities
2012-01-11 00:00:00
nvd
nvd
CVE-2009-0470
2009-02-06 19:30:00
openvas
openvas
Ubuntu USN-708-1 (hplip)
2009-01-20 00:00:00
Ubuntu USN-707-1 (cupsys)
2009-06-05 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
74.3%
Related for NVD:CVE-2008-3821