Infoblox DNS One脚本注入漏洞

漏洞信息详情

Infoblox DNS One脚本注入漏洞

CNNVD编号：CNNVD-200412-024
危害等级：中危-->
危害等级：中危
CVE编号： CVE-2004-0606
漏洞类型：跨站脚本
发布时间： 2004-12-06
威胁类型：远程
更新时间： 2005-10-20
厂商： infoblox
漏洞来源： .');">Discovery is credi...

漏洞简介

Infoblox DNS One运行固件2.4.0-8及其早期版本时存在跨站点脚本漏洞。远程攻击者像其他用户一样借助(1)CLIENTID或者(2)DHCP请求的HOSTNAME选项执行任意脚本。

漏洞公告

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] . It has been reported that this issue has been addressed in versions 2.4.0-9 and 2.4.0-9A of the device firmware. This has not been confirmed by Symantec.

参考网址

来源: XF 名称: dnsone-dhcp-report-xss(16456) 链接:http://xforce.iss.net/xforce/xfdb/16456 来源: BUGTRAQ 名称: 20040619 Script injection in DNSONE appliance 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=108769996925349&w=2 来源: BID 名称: 10573 链接:http://www.securityfocus.com/bid/10573

受影响实体

Infoblox Dns_one_appliance:2.4.0.8
Infoblox Dns_one_appliance:2.4.0.8a

补丁

暂无

正文

Infoblox DNS One脚本注入漏洞

漏洞信息详情