PT-2010-1217 · Sun · Iplanet Messaging Server+1

Publicado 2010-01-28 · Atualizado 2010-01-31 · CVE-2004-2765

NVD

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2004-2765

Produtos afetados

Iplanet Messaging Server

One Messaging Server

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2004-2765 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201601-1 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-56-1 · Correção