PT-2005-4302 · Sambar · Sambar Server

Published 2005-11-05 · Updated 2018-09-27 · CVE-2005-3506

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sambar Server versions 6.3 BETA 2 and earlier

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is possible via the Remote Proxy Server or Proxy Filter IPs field.

Recommendations For Sambar Server versions 6.3 BETA 2 and earlier, consider disabling the proxy.asp functionality until a patch is available. Restrict access to the proxy.asp page to minimize the risk of exploitation. Avoid using the Remote Proxy Server or Proxy Filter IPs field in proxy.asp until the issue is resolved.

Fix

Related Identifiers

CVE-2005-3506

Affected Products

Sambar Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2005-3506 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3506 · Note
• http://osvdb.org/20434 · Note
• http://vupen.com/english/advisories/2005/2272 · Note
• http://secunia.com/advisories/17329 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0038.html · Note