Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2008-2929

Published: 29/08/2008 Updated: 29/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Directory Server

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote malicious users to inject arbitrary web script or HTML via input values that use % (percent) escaping.

Vulnerable Product Search on Vulmon Subscribe to Product

fedora directory server

redhat directory server 8.0

redhat directory server 7.1

References

CWE-79http://www.redhat.com/docs/manuals/dir-server/release-notes/7.1SP7/index.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=454621https://rhn.redhat.com/errata/RHSA-2008-0596.htmlhttps://rhn.redhat.com/errata/RHSA-2008-0601.htmlhttp://www.securityfocus.com/bid/30870http://securitytracker.com/id?1020772http://secunia.com/advisories/31612https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00449.htmlhttp://secunia.com/advisories/31702http://secunia.com/advisories/31777https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00218.htmlhttp://secunia.com/advisories/31565http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01532861http://www.vupen.com/english/advisories/2008/2480https://exchange.xforce.ibmcloud.com/vulnerabilities/44737https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5877https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook