CVEvulnerability

CVE-2005-0085

6.8 MEDIUM Published 2005-04-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-04-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

Affected configurations

• htdig htdig 3.1.5 • htdig htdig 3.1.5 7 • htdig htdig 3.1.5 8 • htdig htdig 3.1.6 • htdig htdig 3.2.0 • htdig htdig 3.2.0b2 • htdig htdig 3.2.0b3 • htdig htdig 3.2.0b4 • htdig htdig 3.2.0b5 • htdig htdig 3.2.0b6 • mandrakesoft mandrake linux 10.0 • mandrakesoft mandrake linux 10.1 • mandrakesoft mandrake linux corporate server 2.1 • mandrakesoft mandrake linux corporate server 3.0 • redhat fedora core core 3.0 • suse suse linux 8.0 • suse suse linux 8.1 • suse suse linux 8.2 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2

References