ID CVE-2005-4831
Summary viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-type parameter, which can be leveraged for cross-site scripting (XSS) and other attacks, as demonstrated using (1) "text/html", or (2) "image/jpeg" with an image that is rendered as HTML by Internet Explorer, a different vulnerability than CVE-2004-1062. NOTE: it was later reported that 0.9.4 is also affected.
References
Vulnerable Configurations
  • cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 19-10-2018 - 15:41)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
bid 12112
bugtraq 20070226 ViewCVS 0.9.4 issues
fulldisc 20050101 Two Vulnerabilities in ViewCVS
sectrack 1017704
Last major update 19-10-2018 - 15:41
Published 31-12-2005 - 05:00
Last modified 19-10-2018 - 15:41
Back to Top