PT-2002-3168 · Htcheck+1 · Htcheck-Php+2

Published 1970-01-01 · Updated 2016-10-18 · CVE-2002-1195

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ht://Check version 1.1 htcheck (affected versions not specified) htcheck-php (affected versions not specified)

Description The issue is related to a cross-site scripting vulnerability (XSS) that allows remote web servers to insert arbitrary HTML, including script, via a web page. Multiple vulnerabilities in the htcheck and htcheck-php packages of the Debian GNU/Linux operating system can be exploited remotely, potentially leading to a breach of protected information integrity.

Recommendations For ht://Check version 1.1, update to a version that fixes the XSS vulnerability. For htcheck, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For htcheck-php, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

BDU:2015-03387

BDU:2015-03388

CVE-2002-1195

DSA-169

Affected Products

Debian

Htcheck

Htcheck-Php

References · 9

• https://bdu.fstec.ru/vul/2015-03387 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1195 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1195 · Security Note
• https://bdu.fstec.ru/vul/2015-03388 · Security Note
• http://iss.net/security_center/static/10089.php · Vendor Advisory
• http://debian.org/security/2002/dsa-169 · Vendor Advisory
• http://debian.org/security/dsa-169 · Note
• http://marc.info/?l=bugtraq&m=103184269605160&w=2 · Note
• http://securityfocus.com/bid/5699 · Note