CVE-2003-0488: XSS
Published Jun 28, 2003
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the addname parameter in the addacl module, or (2) the alias parameter in the domap module.
Affected Software
1 affected component
Kerio Kerio MailServer=5.6.3
Remediation
Patch Available
Patch Available
Event History
Jun 28, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 7, 2003
Data Sourced
via NVD·04:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0488?
CVE-2003-0488 has a moderate severity level due to its potential for exploitation via cross-site scripting.
2
How do I fix CVE-2003-0488?
To fix CVE-2003-0488, upgrade Kerio MailServer to the latest version that addresses these XSS vulnerabilities.
3
What are the exploit vectors for CVE-2003-0488?
CVE-2003-0488 can be exploited by manipulating the add_name parameter in the add_acl module or the alias parameter in the do_map module.
4
Who is affected by CVE-2003-0488?
CVE-2003-0488 affects users of Kerio MailServer version 5.6.3.
5
What type of vulnerability is CVE-2003-0488?
CVE-2003-0488 is classified as a cross-site scripting (XSS) vulnerability.