CVE-2005-4080

Опубликовано: 08 дек. 2005

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.1.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.2.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.2.4:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:3.2.5:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:4.0:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:horde:imp:4.0.4:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01047

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-4080

debian

почти 20 лет назад

Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 ...

GHSA-8xjp-h5q2-g6vf

github

больше 3 лет назад