Unscored severity · published Aug 29, 2008
CVE-2008-2929
Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Directory Server · Redhat
7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2929
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2929
h20000.www2.hp.com
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861
secunia.com
http://secunia.com/advisories/31565
secunia.com
http://secunia.com/advisories/31612
secunia.com
http://secunia.com/advisories/31702
secunia.com
http://secunia.com/advisories/31777
securitytracker.com
http://securitytracker.com/id?1020772
More from Directory Server
–
CVE-2008-2930
Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 allow remote attackers to cause a denial of service (CPU consumption and…
–
CVE-2008-3283
Multiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server 1.1.1 and earlier allow remote attackers to cause a…