CVE-2006-5486: XSS

Published Oct 24, 2006

Updated

Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.

Affected Software

4 affected components

Sun iPlanet Messaging Server=5.2

Sun Java System Messaging Server=6.0

Sun Java System Messaging Server=6.1

Sun Java System Messaging Server=6.2

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1

Event History

Oct 24, 2006

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Data Sourced

via NVD·10:07 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-5486?

CVE-2006-5486 has a medium severity rating due to its potential for remote code execution via XSS.

How do I fix CVE-2006-5486?

To fix CVE-2006-5486, upgrade to a version of Sun Java System Messaging Server or iPlanet Messaging Server that is not affected, such as version 6.3 or later.

Which software versions are impacted by CVE-2006-5486?

CVE-2006-5486 affects Sun Java System Messaging Server version 6.0 to 6.2 and iPlanet Messaging Server version 5.2.

What type of vulnerability is CVE-2006-5486?

CVE-2006-5486 is a cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary JavaScript.

Can CVE-2006-5486 be exploited remotely?

Yes, the CVE-2006-5486 vulnerability can be exploited remotely through crafted messages sent to the affected servers.