First published: Thu Mar 31 2005(Updated: )
Cross-site scripting (XSS) vulnerability in network.cgi in mailreader before 2.3.29 earlier allows remote attackers to inject arbitrary web script or HTML via MIME text/enriched or text/richtext messages.
Credit: security@debian.org
Affected Software | Affected Version | How to fix |
---|---|---|
Mailreader | =2.3.20 | |
Mailreader | =2.3.21 | |
Mailreader | =2.3.22 | |
Mailreader | =2.3.23 | |
Mailreader | =2.3.24 | |
Mailreader | =2.3.25 | |
Mailreader | =2.3.26 | |
Mailreader | =2.3.27 | |
Mailreader | =2.3.28 | |
Mailreader | =2.3.29 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0386 is considered a medium severity vulnerability in Mailreader due to the potential for cross-site scripting attacks.
To mitigate CVE-2005-0386, upgrade to Mailreader version 2.3.29 or later, which addresses the XSS vulnerability.
Versions 2.3.20 through 2.3.28 of Mailreader are affected by CVE-2005-0386.
Yes, CVE-2005-0386 can be exploited remotely by attackers who send specially crafted messages.
CVE-2005-0386 allows remote attackers to inject arbitrary web scripts or HTML, potentially leading to various types of attacks including phishing and data theft.