CVE-2005-4567

Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or HTML by sending (1) the href parameter to index.fts, or the param1 parameter to (2) /domains/index.fts, (3) /config/licence.fts, or (4) /config/systemacl.fts.

CVSS v2.0 5.8 MEDIUM

5.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability : 8.6 / Impact : 4.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1015.html	Exploit
http://www.securityfocus.com/bid/15972	Exploit
http://securitytracker.com/id?1015399	Exploit
http://www.osvdb.org/22104
http://www.osvdb.org/22105
http://www.osvdb.org/22106
http://www.osvdb.org/22107
http://www.vupen.com/english/advisories/2005/3010

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:floosietek:ftgate:4.4_build_4.4.000:*:*:*:*:*:*:*

Information

Published : 2005-12-29 03:03

Updated : 2011-03-07 18:28

NVD link : CVE-2005-4567

Mitre link : CVE-2005-4567

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

floosietek

ftgate

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1015.html", "name": "20051220 [ACSSEC-2005-11-25-0x3] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Cr oss Site Scripting Vulnerability", "tags": ["Exploit"], "refsource": "FULLDISC"}, {"url": "http://www.securityfocus.com/bid/15972", "name": "15972", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://securitytracker.com/id?1015399", "name": "1015399", "tags": ["Exploit"], "refsource": "SECTRACK"}, {"url": "http://www.osvdb.org/22104", "name": "22104", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/22105", "name": "22105", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/22106", "name": "22106", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/22107", "name": "22107", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2005/3010", "name": "ADV-2005-3010", "tags": [], "refsource": "VUPEN"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in FTGate Technology (formerly known as Floosietek) FTGate 4.4 (Build 4.4.000 Oct 26 2005) allow remote attackers to inject arbitrary web script or HTML by sending (1) the href parameter to index.fts, or the param1 parameter to (2) /domains/index.fts, (3) /config/licence.fts, or (4) /config/systemacl.fts."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-4567", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2005-12-29T11:03Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:floosietek:ftgate:4.4_build_4.4.000:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2011-03-08T02:28Z"}