CVE-2005-0407

{"id": "CVE-2005-0407", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-05-02T04:00:00.000", "references": [{"url": "http://seclists.org/lists/fulldisclosure/2005/Feb/0347.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/14294", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.redteam-pentesting.de/advisories/rt-sa-2005-007.txt", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/12554", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title."}], "lastModified": "2008-09-10T19:35:31.087", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zakon_group:openconf:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2D373E1-1E39-4F79-9E6F-72C85A1CF2DD"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.0_beta1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6349190-A64D-49F9-B010-0B66D9675C23"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.0_beta2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37301935-1E96-4283-B8C4-DC816E008934"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.0_rc1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "599488FA-B290-49AC-8369-73AC9E881361"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.0_rc2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE3855A6-C652-4420-A4B6-5A702F71CAD5"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.01:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D3F0585-27D0-4BCE-B80D-9A3CBA4A13DB"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.02:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CCAF2D9-125C-46D6-B6EE-8085F74E7854"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.03:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4FC00B8-9F3F-4FB8-B47B-12B495C5BFF8"}, {"criteria": "cpe:2.3:a:zakon_group:openconf:1.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "793B7BB3-57F6-403D-87EF-40EC30B75872"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}