PT-2005-4892 · Logisphere · Logisphere

Published 2005-12-13 · Updated 2008-09-05 · CVE-2005-4204

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions LogiSphere version 0.9.9j

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary Javascript via the msg command. The extent to which this issue may be related to or distinct from a denial-of-service (DoS) issue associated with the msg command is unclear due to a lack of detailed information from the original researcher.

Recommendations For LogiSphere version 0.9.9j, as a temporary workaround, consider restricting the use of the msg command until a patch or more detailed guidance is available.

Fix

Related Identifiers

CVE-2005-4204

Affected Products

Logisphere

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-4204 · Security Note
• http://ipomonis.com/advisories/logisphere_server.zip · Note