CVEvulnerability

CVE-2002-1529

4.3 MEDIUM Published 2003-03-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2003-03-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.

Affected configurations

• surfcontrol superscout email filter 3.5 • surfcontrol superscout email filter 3.5.1 • surfcontrol superscout email filter 4.0

References

http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html Exploit, Vendor Advisory
http://www.iss.net/security_center/static/10319.php Patch, Vendor Advisory
http://www.securityfocus.com/bid/5928 Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html Exploit, Vendor Advisory
http://www.iss.net/security_center/static/10319.php Patch, Vendor Advisory
http://www.securityfocus.com/bid/5928 Exploit, Patch, Vendor Advisory