CVE-2005-3757: High severity google mini search appliance vulnerability
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3757?
The severity of CVE-2005-3757 is considered critical due to potential remote code execution and information disclosure vulnerabilities.
How do I fix CVE-2005-3757?
To fix CVE-2005-3757, ensure that you update the Google Mini Search Appliance or Google Search Appliance to the latest security patch provided by Google.
What software is affected by CVE-2005-3757?
CVE-2005-3757 affects the Google Mini Search Appliance and Google Search Appliance.
What type of attack can be executed through CVE-2005-3757?
CVE-2005-3757 allows remote attackers to execute arbitrary code by exploiting vulnerable XSLT style sheets.
Is authentication required to exploit CVE-2005-3757?
No authentication is required to exploit CVE-2005-3757, allowing unauthenticated remote attackers to access the vulnerability.