CVE-2003-0292 - Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to

CVE-2003-0292

Summary

Cross-site scripting (XSS) vulnerability in Inktomi Traffic-Server 5.5.1 allows remote attackers to insert arbitrary web script or HTML into an error page that appears to come from the domain that the client is visiting, aka "Man-in-the-Middle" XSS.

References

http://marc.info/?l=bugtraq&m=105292750807005&w=2
http://www.securityfocus.com/bid/7596

Vulnerable Configurations

cpe:2.3:a:inktomi:inktomi_traffic-server:5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:inktomi:inktomi_traffic-server:5.5.1:*:*:*:*:*:*:*

CVSS

Base:	6.8 (as of 18-10-2016 - 02:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:P/I:P/A:P

refmap via4

bid	7596
bugtraq	20030514 Inktomi Traffic-Server XSS: man-in-the-middle XSS !

Last major update

18-10-2016 - 02:31

Published

16-06-2003 - 04:00

Last modified

18-10-2016 - 02:31