CVE-2005-0085

Severity Score

6.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ht://dig (htdig) anteriores a 3.1.6r7 permite a atacantes remotos ejecutar script web de su elección o HTML mediante el parámetro config, que no es limpiado adecuamante antes de ser mostrado en le mensaje de error.

*Credits: N/A

CVSS Scores

NISTv2 6.8

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2005-01-18 CVE Reserved
2005-02-15 CVE Published
2024-01-23 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (20)

URL	Tag	Source
http://secunia.com/advisories/14255	Third Party Advisory
http://secunia.com/advisories/14276	Third Party Advisory
http://secunia.com/advisories/14303	Third Party Advisory
http://secunia.com/advisories/14795	Third Party Advisory
http://secunia.com/advisories/15007	Third Party Advisory
http://secunia.com/advisories/17414	Third Party Advisory
http://secunia.com/advisories/17415	Third Party Advisory
http://securitytracker.com/id?1013078	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/19223	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878	Signature

URL	Date	SRC

URL	Date	SRC
http://www.debian.org/security/2005/dsa-680	2017-10-11
http://www.securityfocus.com/bid/12442	2017-10-11

URL	Date	SRC
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt	2017-10-11
http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml	2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2005:063	2017-10-11
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2005-073.html	2017-10-11
http://www.redhat.com/support/errata/RHSA-2005-090.html	2017-10-11
https://access.redhat.com/security/cve/CVE-2005-0085	2005-02-15
https://bugzilla.redhat.com/show_bug.cgi?id=1617447	2005-02-15

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.1.5 Search vendor "Htdig" for product "Htdig" and version "3.1.5"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.1.5_7 Search vendor "Htdig" for product "Htdig" and version "3.1.5_7"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.1.5_8 Search vendor "Htdig" for product "Htdig" and version "3.1.5_8"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.1.6 Search vendor "Htdig" for product "Htdig" and version "3.1.6"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.2.0 Search vendor "Htdig" for product "Htdig" and version "3.2.0"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.2.0b2 Search vendor "Htdig" for product "Htdig" and version "3.2.0b2"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.2.0b3 Search vendor "Htdig" for product "Htdig" and version "3.2.0b3"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.2.0b4 Search vendor "Htdig" for product "Htdig" and version "3.2.0b4"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.2.0b5 Search vendor "Htdig" for product "Htdig" and version "3.2.0b5"		-		Affected
Htdig Search vendor "Htdig"		Htdig Search vendor "Htdig" for product "Htdig"				3.2.0b6 Search vendor "Htdig" for product "Htdig" and version "3.2.0b6"		-		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux"				10.0 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "10.0"		-		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux"				10.0 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "10.0"		amd64		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux"				10.1 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "10.1"		-		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Search vendor "Mandrakesoft" for product "Mandrake Linux"				10.1 Search vendor "Mandrakesoft" for product "Mandrake Linux" and version "10.1"		x86_64		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Corporate Server Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server"				2.1 Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server" and version "2.1"		-		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Corporate Server Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server"				2.1 Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server" and version "2.1"		x86_64		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Corporate Server Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server"				3.0 Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server" and version "3.0"		-		Affected
Mandrakesoft Search vendor "Mandrakesoft"		Mandrake Linux Corporate Server Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server"				3.0 Search vendor "Mandrakesoft" for product "Mandrake Linux Corporate Server" and version "3.0"		x86_64		Affected
Redhat Search vendor "Redhat"		Fedora Core Search vendor "Redhat" for product "Fedora Core"				core_3.0 Search vendor "Redhat" for product "Fedora Core" and version "core_3.0"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				8.0 Search vendor "Suse" for product "Suse Linux" and version "8.0"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				8.0 Search vendor "Suse" for product "Suse Linux" and version "8.0"		i386		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				8.1 Search vendor "Suse" for product "Suse Linux" and version "8.1"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				8.2 Search vendor "Suse" for product "Suse Linux" and version "8.2"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.0 Search vendor "Suse" for product "Suse Linux" and version "9.0"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.0 Search vendor "Suse" for product "Suse Linux" and version "9.0"		x86_64		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.1 Search vendor "Suse" for product "Suse Linux" and version "9.1"		-		Affected
Suse Search vendor "Suse"		Suse Linux Search vendor "Suse" for product "Suse Linux"				9.2 Search vendor "Suse" for product "Suse Linux" and version "9.2"		-		Affected