CVE-2006-6675: XSS

Published Dec 21, 2006

Updated

Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app.

Affected Software

3 affected components

Novell Apache Http Server=2.0.48

Novell Netware=6.5-sp6

Novell Netware=6.5-sp5

Event History

Dec 21, 2006

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:28 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2006-6675?

CVE-2006-6675 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.

How do I fix CVE-2006-6675?

To fix CVE-2006-6675, upgrade to the latest version of Novell NetWare or Apache HTTP Server that addresses this vulnerability.

What systems are affected by CVE-2006-6675?

CVE-2006-6675 specifically affects Novell NetWare 6.5 Support Pack 5 and 6, as well as Apache HTTP Server version 2.0.48 on NetWare.

What type of vulnerability is CVE-2006-6675?

CVE-2006-6675 is a cross-site scripting (XSS) vulnerability, allowing remote attackers to inject arbitrary scripts.

Can CVE-2006-6675 lead to data breaches?

Yes, CVE-2006-6675 can potentially lead to data breaches by allowing attackers to execute scripts in the context of a user's browser.