PT-2005-1397 · Alt N · Alt-N Webadmin

David Alonso Pérez · Published 2005-01-28 · Updated 2017-07-11 · CVE-2005-0319

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Alt-N WebAdmin version 3.0.4

Description A direct remote injection issue in the modalfram.wdm component allows remote attackers to load external web pages that appear to originate from the WebAdmin server. This enables the injection of arbitrary HTML or web script, facilitating cross-site scripting (XSS) and phishing attacks.

Recommendations For Alt-N WebAdmin version 3.0.4, consider disabling the modalfram.wdm component as a temporary workaround until a patch is available. Restrict access to the WebAdmin server to minimize the risk of exploitation. Avoid using the WebAdmin server for sensitive operations until the issue is resolved.

Fix

Related Identifiers

CVE-2005-0319

Affected Products

Alt-N Webadmin

References · 4

• http://securityfocus.com/bid/12395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0319 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19162 · Note
• http://marc.info/?l=bugtraq&m=110692897003614&w=2 · Note