1. CVE-Search
  2. CVE-2006-4958
ID CVE-2006-4958
Summary Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:secure_global_desktop:3.42:*:enterprise:*:*:*:*:*
    cpe:2.3:a:sun:secure_global_desktop:3.42:*:enterprise:*:*:*:*:*
  • cpe:2.3:a:sun:secure_global_desktop:4.0:*:enterprise:*:*:*:*:*
    cpe:2.3:a:sun:secure_global_desktop:4.0:*:enterprise:*:*:*:*:*
CVSS
Base: 6.8 (as of 17-10-2018 - 21:40)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid
  • 20135
  • 20276
bugtraq 20060921 [scip_Advisory 2555] Sun Secure Global Desktop prior 4.3 multiple remote vulnerabilities
confirm http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm
misc http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555
sectrack 1016900
secunia 22037
sreason 1623
sunalert 102650
vupen ADV-2006-3739
xf
  • sun-ssgd-unspecified-xss(29070)
  • sun-ssgd-xss(29303)
Last major update 17-10-2018 - 21:40
Published 23-09-2006 - 10:07
Last modified 17-10-2018 - 21:40
Back to Top