PT-2005-4302 · Sambar · Sambar Server

Publicado 2005-11-05 · Atualizado 2018-09-27 · CVE-2005-3506

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sambar Server versions 6.3 BETA 2 and earlier

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is possible via the Remote Proxy Server or Proxy Filter IPs field.

Recommendations For Sambar Server versions 6.3 BETA 2 and earlier, consider disabling the proxy.asp functionality until a patch is available. Restrict access to the proxy.asp page to minimize the risk of exploitation. Avoid using the Remote Proxy Server or Proxy Filter IPs field in proxy.asp until the issue is resolved.

Correção

Identificadores relacionados

CVE-2005-3506

Produtos afetados

Sambar Server

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3506 · Nota
• http://osvdb.org/20434 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3506 · Nota de Segurança
• http://vupen.com/english/advisories/2005/2272 · Nota
• http://secunia.com/advisories/17329 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0038.html · Nota