FreeBSD : cgiwrap -- XSS Vulnerability (bc6a7e79-e111-11dd-afcd-00e0815b8da8)

Medium Nessus Plugin ID 35354


The remote FreeBSD host is missing a security-related update.


Secunia reports :

A vulnerability has been reported in CGIWrap, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerability is caused due to the application generating error messages without specifying a charset. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Successful exploitation may require that the victim uses Internet Explorer or a browser based on Internet Explorer components.


Update the affected package.

See Also

Plugin Details

Severity: Medium

ID: 35354

File Name: freebsd_pkg_bc6a7e79e11111ddafcd00e0815b8da8.nasl

Version: $Revision: 1.13 $

Type: local

Published: 2009/01/13

Modified: 2013/06/22

Dependencies: 12634

Risk Information

Risk Factor: Medium


Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:cgiwrap, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2009/01/13

Vulnerability Publication Date: 2008/06/19

Reference Information

CVE: CVE-2008-2852

Secunia: 30765

CWE: 79