CVE-2008-0925

Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within "error messages of the HTTP stack."

Link	Resource
http://www.novell.com/support/viewContent.do?externalId=3460217&sliceId=1
http://www.securityfocus.com/bid/29782
http://secunia.com/advisories/30748	Vendor Advisory
http://securitytracker.com/id?1020321
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html
http://support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html
http://www.vupen.com/english/advisories/2008/1863/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/43151

Configuration 1

cpe:2.3:a:novell:edirectory:8.8:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:linux:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:windows_2003:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:windows_2000:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.2:*:solaris:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8:*:linux:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.8.1:*:linux:*:*:*:*:* cpe:2.3:a:novell:edirectory:8.7.3.9:*:linux:*:*:*:*:*

---

Published : 2008-06-18 07:41

Updated : 2017-08-08 01:29

---

NVD link : CVE-2008-0925

Mitre link : CVE-2008-0925

No products.

CWE-79