Unscored severity · published Apr 27, 2005
CVE-2005-0085
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fedora Core · Redhat
core_3.0 · source: NVD
HT
Htdig · Htdig
3.1.5; 3.1.5_7; 3.1.5_8; 3.1.6; 3.2.0; 3.2.0b2; +4 more · source: NVD
ML
Mandrake Linux · Mandrakesoft
10.0; 10.0; 10.1; 10.1 · source: NVD
ML
Mandrake Linux Corporate Server · Mandrakesoft
2.1; 2.1; 3.0; 3.0 · source: NVD
SL
Suse Linux · Suse
8.0; 8.0; 8.1; 8.2; 9.0; 9.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0085
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0085
secunia.com
http://secunia.com/advisories/14255
secunia.com
http://secunia.com/advisories/14276
secunia.com
http://secunia.com/advisories/14303
secunia.com
http://secunia.com/advisories/14795
secunia.com
http://secunia.com/advisories/15007
More from Htdig
–
CVE-2007-6110
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter
–
CVE-2002-2010
Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words…
–
CVE-2001-0834
htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1)…
–
CVE-2000-0208
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch