PT-2005-4892 · Logisphere · Logisphere

Publicado 2005-12-13 · Atualizado 2008-09-05 · CVE-2005-4204

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions LogiSphere version 0.9.9j

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary Javascript via the msg command. The extent to which this issue may be related to or distinct from a denial-of-service (DoS) issue associated with the msg command is unclear due to a lack of detailed information from the original researcher.

Recommendations For LogiSphere version 0.9.9j, as a temporary workaround, consider restricting the use of the msg command until a patch or more detailed guidance is available.

Correção

Identificadores relacionados

CVE-2005-4204

Produtos afetados

Logisphere

Referências · 2

• http://ipomonis.com/advisories/logisphere_server.zip · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4204 · Nota de Segurança