PT-2002-2066 · Blue Coat Systems · Security Gateway+2

Publicado

2002-10-04

·

Atualizado

2008-09-05

·

CVE-2002-1060

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Blue Coat Systems CacheOS versions 4.1.06 Blue Coat Systems Security Gateway version 2.1.02 Blue Coat Systems Server Accelerator version 4.1.06
Description: A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.
Recommendations: For Blue Coat Systems CacheOS version 4.1.06, update to a version that addresses this issue. For Blue Coat Systems Security Gateway version 2.1.02, update to a version that addresses this issue. For Blue Coat Systems Server Accelerator version 4.1.06, update to a version that addresses this issue.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2002-1060

Produtos afetados

Cacheos
Security Gateway
Server Accelerator