PT-2005-1563 · Mono · Mono

Andir + 1 · Publicado 2005-02-22 · Atualizado 2016-10-18 · CVE-2005-0509

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mono version 1.0.5

Description The issue allows remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<". This is due to multiple cross-site scripting (XSS) vulnerabilities in the Mono implementation of ASP.NET.

Recommendations For Mono version 1.0.5, consider disabling the use of Unicode representations for ASCII fullwidth characters until a patch is available. Restrict input validation to prevent the injection of arbitrary HTML or web script.

Correção

Identificadores relacionados

CVE-2005-0509

Produtos afetados

Mono

Referências · 8

• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0509 · Aviso do Fabricante
• http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml · Nota
• http://secunia.com/advisories/14325 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0509 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110867912714913&w=2 · Nota
• https://osv.dev/vulnerability/CVE-2005-0509 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0509 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0509 · Nota