Zeus Web服务器管理界面跨站脚本攻击漏洞

漏洞信息详情

Zeus Web服务器管理界面跨站脚本攻击漏洞

• CNNVD编号：CNNVD-200212-839
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2002-1785
  
• 漏洞类型：
  
  
  跨站脚本
  
• 发布时间：
  
  2002-12-31
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  zeus_technologies
• 漏洞来源：
  Discovered by euro…

从Zeus Web Server 4.0 到4.1r2版本Zeus管理服务器存在跨站脚本攻击(XSS)漏洞。远程认证用户借助index.fcgi的section参数注入任意web脚本或HTML。

Customers who are concerned about this vulnerability should upgrade to either Zeus Web Server 4.1r5 (released 19th Nov. 2002) or Zeus Web Server 4.2 (released 21st Nov. 2002).
Zeus Technologies Zeus Web Server 4.0

• Zeus Technology Zeus Web Server 4.2
  
  http://www.zeus.com/downloads/

Zeus Technologies Zeus Web Server 4.1 r1

• Zeus Technology Zeus Web Server 4.1r5
  
  http://www.zeus.com/downloads/
• Zeus Technology Zeus Web Server 4.2
  
  http://www.zeus.com/downloads/

Zeus Technologies Zeus Web Server 4.1

• Zeus Technology Zeus Web Server 4.1r5
  
  http://www.zeus.com/downloads/
• Zeus Technology Zeus Web Server 4.2
  
  http://www.zeus.com/downloads/

Zeus Technologies Zeus Web Server 4.1 r3

• Zeus Technology Zeus Web Server 4.1r5
  
  http://www.zeus.com/downloads/
• Zeus Technology Zeus Web Server 4.2
  
  http://www.zeus.com/downloads/

Zeus Technologies Zeus Web Server 4.1 r2

• Zeus Technology Zeus Web Server 4.1r5
  
  http://www.zeus.com/downloads/
• Zeus Technology Zeus Web Server 4.2
  
  http://www.zeus.com/downloads/

Zeus Technologies Zeus Web Server 4.1 r4

• Zeus Technology Zeus Web Server 4.1r5
  
  http://www.zeus.com/downloads/
• Zeus Technology Zeus Web Server 4.2
  
  http://www.zeus.com/downloads/

来源: BID
名称: 6144
链接:http://www.securityfocus.com/bid/6144

来源: XF
名称: zeus-admin-index-xss(10567)
链接:http://www.iss.net/security_center/static/10567.php

来源: BUGTRAQ
名称: 20021211 Re: Zeus Admin Server v4.1r2 index.fcgi XSS bug
链接:http://online.securityfocus.com/archive/1/302961

来源: BUGTRAQ
名称: 20021108 Zeus Admin Server v4.1r2 index.fcgi XSS bug
链接:http://archives.neohapsis.com/archives/bugtraq/2002-11/0104.html