PT-2006-5701 · Sun · Sun Secure Global Desktop

Marc Ruef · Publicado 2006-09-23 · Atualizado 2018-10-17 · CVE-2006-4958

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Secure Global Desktop versions prior to 4.20.983

Description The issue involves multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML. The attack vectors are unspecified but possibly involve several CGI and JSP files, including taarchives.cgi, ttaAuthentication.jsp, ttalicense.cgi, ttawlogin.cgi, ttawebtop.cgi, ttaabout.cgi, and test-cgi.

Recommendations For versions prior to 4.20.983, update to version 4.20.983 or later to resolve the issue. As a temporary workaround, consider restricting access to the potentially vulnerable CGI and JSP files until the update is applied.

Correção

Identificadores relacionados

CVE-2006-4958

Produtos afetados

Sun Secure Global Desktop

Referências · 13

• http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm · Nota
• http://scip.ch/cgi-bin/smss/showadvf.pl?id=2555 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29303 · Nota
• http://securityfocus.com/bid/20135 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102650-1 · Aviso do Fabricante
• http://securityfocus.com/bid/20276 · Nota
• http://securityreason.com/securityalert/1623 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4958 · Nota de Segurança
• http://secunia.com/advisories/22037 · Nota
• http://vupen.com/english/advisories/2006/3739 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29070 · Nota
• http://securitytracker.com/id?1016900 · Nota
• http://securityfocus.com/archive/1/446566/100/0/threaded · Nota