CVE-2007-6700: XSS
Published Feb 5, 2008
·Updated
Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter.
Affected Software
1 affected component
OpenBSD OpenBSD=4.1
Remediation
Patch Available
Patch Available
Event History
Feb 5, 2008
CVE Published
02:00 AM
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6700?
CVE-2007-6700 has a moderate severity due to the potential for remote attackers to execute arbitrary scripts.
2
How do I fix CVE-2007-6700?
To fix CVE-2007-6700, update to a patched version of OpenBSD that addresses the XSS vulnerability.
3
What systems are affected by CVE-2007-6700?
CVE-2007-6700 affects OpenBSD version 4.1 and may impact systems utilizing the web interface of the BGPD daemon.
4
What type of vulnerability is CVE-2007-6700?
CVE-2007-6700 is classified as a Cross-Site Scripting (XSS) vulnerability.
5
Who can exploit CVE-2007-6700?
CVE-2007-6700 could be exploited by remote attackers who can send crafted requests to the BGPD web interface.