CVE-2005-0085

N/A Unknown

Published: April 27, 2005 Modified: April 16, 2026

Description

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt

Source: cve@mitre.org

http://secunia.com/advisories/14255

Source: cve@mitre.org

http://secunia.com/advisories/14276

Source: cve@mitre.org

http://secunia.com/advisories/14303

Source: cve@mitre.org

http://secunia.com/advisories/14795

Source: cve@mitre.org

http://secunia.com/advisories/15007

Source: cve@mitre.org

http://secunia.com/advisories/17414

Source: cve@mitre.org

http://secunia.com/advisories/17415

Source: cve@mitre.org

http://securitytracker.com/id?1013078

Source: cve@mitre.org

http://www.debian.org/security/2005/dsa-680

Source: cve@mitre.org

Patch Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2005:063

Source: cve@mitre.org

http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00002.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-073.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-090.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/12442

Source: cve@mitre.org

Patch Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/19223

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10878

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/SCOSA-2005.46.txt