Lucene search

K
osvGoogleOSV:DSA-680-1
HistoryFeb 14, 2005 - 12:00 a.m.

htdig - unsanitised input

2005-02-1400:00:00
Google
osv.dev
3

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

Michael Krax discovered a cross site scripting vulnerability in
ht://dig, a web search system for an intranet or small internet.

For the stable distribution (woody) this problem has been fixed in
version 3.1.6-3woody1.

For the unstable distribution (sid) this problem has been fixed in
version 3.1.6-11.

We recommend that you upgrade your htdig package.

CPENameOperatorVersion
htdigeq3.1.6-3

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P