PT-2007-6508 · Ca · Ca Host-Based Intrusion Prevention System

Published 2007-10-22 · Updated 2021-04-09 · CVE-2007-5472

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: CA Host-Based Intrusion Prevention System (HIPS) versions prior to 8.0.0.93

Description: A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer. This occurs due to improper handling of user input in the Server component.

Recommendations: For versions prior to 8.0.0.93, update to version 8.0.0.93 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2007-5472

Affected Products

Ca Host-Based Intrusion Prevention System

References · 9

• http://supportconnectw.ca.com/public/cahips/infodocs/cahips-secnotice.asp · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-5472 · Security Note
• http://secunia.com/advisories/27301 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3547 · Note
• http://osvdb.org/37998 · Note
• http://securityfocus.com/archive/1/482536/100/0/threaded · Note
• http://securitytracker.com/id?1018839 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37285 · Note
• http://securityfocus.com/bid/26134 · Note