CVE-2006-4958

Description

Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/29303

https://exchange.xforce.ibmcloud.com/vulnerabilities/29070

http://www.vupen.com/english/advisories/2006/3739

http://www.securityfocus.com/bid/20276

http://www.securityfocus.com/bid/20135

http://www.securityfocus.com/archive/1/446566/100/0/threaded

http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555

http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102650-1

http://securitytracker.com/id?1016900

http://securityreason.com/securityalert/1623

http://secunia.com/advisories/22037

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3