4 matches found
Cross-site Scripting (XSS)
adminutil is vulnerable to cross-site scripting XSS. The vulnerability exists as the Directory Server Administration Express web interface incorrectly parsed %-escaped user provided values. A remote attacker could use this flaw to conduct cross-site scripting attacks against directory server...
[SECURITY] Fedora 9 Update: adminutil-1.1.7-1.fc9
adminutil is libraries of functions used to administer directory servers, usually in conjunction with the admin server. adminutil is broken into two libraries - libadminutil contains the basic functionality, and libadmsslutil contains SSL versions and wrappers around the basic functions. The PSET...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway DSGW web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject...
CVE-2008-2929
The CVE-2008-2929 event concerns multiple XSS vulnerabilities in the adminutil library used by the Directory Server Administration Express and Directory Server Gateway web interfaces. Affected systems include Red Hat Directory Server 7.1 prior to SP7, 8 EL4/EL5, and Fedora Directory Server. The X...