CVE-2008-1474

Опубликовано: 24 мар. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).

Ссылки

http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markup
Patch
Vendor Advisory
http://secunia.com/advisories/29336
Vendor Advisory
http://secunia.com/advisories/29375
Vendor Advisory
http://secunia.com/advisories/29848
Patch
Vendor Advisory
http://secunia.com/advisories/30274
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200805-21.xml
http://www.debian.org/security/2008/dsa-1554
http://www.securityfocus.com/bid/28239
Patch
http://www.vupen.com/english/advisories/2008/0891
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=436546
https://exchange.xforce.ibmcloud.com/vulnerabilities/41241
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00264.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00375.html
http://roundup.cvs.sourceforge.net/roundup/roundup/CHANGES.txt?revision=1.939&view=markup
Patch
Vendor Advisory
http://secunia.com/advisories/29336
Vendor Advisory
http://secunia.com/advisories/29375
Vendor Advisory
http://secunia.com/advisories/29848
Patch
Vendor Advisory
http://secunia.com/advisories/30274
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200805-21.xml
http://www.debian.org/security/2008/dsa-1554

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:roundup-tracker:roundup:*:*:*:*:*:*:*:*

Версия до 1.4.3 (включая)

cpe:2.3:a:roundup-tracker:roundup:0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.4:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.5:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.6:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.7:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.2.8:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.3.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre2:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre3:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.4.0:b1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.4.0:b2:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.4.2:pr1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta2:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.0:pr1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.4:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.5:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.6:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.7:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.8:stable:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.5.9:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.0:b1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.0:b2:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.0:b3:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.0:b4:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.4:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.5:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.6:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.7:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.8:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.9:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.10:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.6.11:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.0:b1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.0:b2:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.0:b3:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.4:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.5:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.6:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.7:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.8:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.9:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.10:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.11:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.7.12:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.0:b1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.0:b2:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.4:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.5:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.8.6:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:0.9.0:b1:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.3.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.0:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:roundup-tracker:roundup:1.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01035

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2008-1474

ubuntu

больше 17 лет назад

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).

CVE-2008-1474

debian

больше 17 лет назад

Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unkn ...

GHSA-c3qv-mf8h-434r

CVSS3: 6.1

github

больше 3 лет назад

Roundup vulnerability related to Cross-site scripting (XSS)

BDU:2015-02584

fstec

больше 17 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить целостность защищаемой информации

EPSS

Процентиль: 77%

0.01035

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79