CVE-2006-3550: XSS
First published: Thu Jul 13 2006(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject arbitrary web script or HTML via unspecified "writable form fields and hidden fields," including "authentication frontends."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 FirePass SSL VPN | =5.4.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2352
- http://www.securityfocus.com/bid/18799
- http://securitytracker.com/id?1016431
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047635.html
- http://securityreason.com/securityalert/1237
- http://www.vupen.com/english/advisories/2006/2678
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27547
- http://www.securityfocus.com/archive/1/439033/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2006-3550?
CVE-2006-3550 is considered to be a moderate severity vulnerability due to the potential for remote attackers to exploit cross-site scripting.
How do I fix CVE-2006-3550?
To fix CVE-2006-3550, it is recommended to update F5 FirePass 4100 to the latest version that addresses these cross-site scripting vulnerabilities.
What types of attacks are possible with CVE-2006-3550?
CVE-2006-3550 can allow attackers to inject arbitrary web scripts or HTML into writable form fields and hidden fields, potentially leading to session hijacking or phishing attacks.
Which versions of F5 FirePass are affected by CVE-2006-3550?
CVE-2006-3550 specifically affects F5 FirePass 4100 version 5.4.2.
What are the implications of CVE-2006-3550 for users?
The implications of CVE-2006-3550 for users include the risk of malicious script execution in browsers, which may compromise sensitive data or system integrity.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/f5
- canonical/f5 firepass ssl vpn
- version/f5 firepass ssl vpn/5.4.2