CVE-2005-0085
Fixed in a distro release EPSS 2%
Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.
Products: htdig, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, redhat fedora_core, suse_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | htdig | 1:3.1.6-11 |
| Debian 13 | htdig | 1:3.1.6-11 |
| Debian 14 | htdig | 1:3.1.6-11 |
| Debian 3.0 | htdig | 3.1.6-3woody1 |
| Red Hat Enterprise Linux 4 | htdig | 3:3.2.0b6-3.40.1 |
| Red Hat Enterprise Linux 4 | htdig-debuginfo | 3:3.2.0b6-3.40.1 |
| Red Hat Enterprise Linux 4 | htdig-web | 3:3.2.0b6-3.40.1 |