CVE-2008-4485: XSS
First published: Wed Oct 08 2008(Updated: )
Cross-site scripting (XSS) vulnerability in the ICAP patience page in Blue Coat Security Gateway OS (SGOS) 4.2 before 4.2.9, 5.2 before 5.2.5, and 5.3 before 5.3.1.7 allows remote attackers to inject arbitrary web script or HTML via the URL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bluecoat Security Gateway OS | =4.2 | |
| Bluecoat Security Gateway OS | =5.2 | |
| Bluecoat Security Gateway OS | =5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://marc.info/?l=bugtraq&m=122210321731789&w=2
- http://www.securitytracker.com/id?1020979
- http://marc.info/?l=bugtraq&m=122298544725313&w=2
- http://secunia.com/advisories/32122
- http://www.bluecoat.com/support/securityadvisories/icap_patience
- http://www.securityfocus.com/bid/31543
- http://securityreason.com/securityalert/4367
- http://www.vupen.com/english/advisories/2008/2739
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45625
Frequently Asked Questions
What is the severity of CVE-2008-4485?
CVE-2008-4485 has a medium severity rating due to its potential for enabling cross-site scripting attacks.
How do I fix CVE-2008-4485?
The fix for CVE-2008-4485 involves upgrading to Blue Coat Security Gateway OS versions 4.2.9, 5.2.5, or 5.3.1.7 or later for vulnerability mitigation.
What versions are affected by CVE-2008-4485?
CVE-2008-4485 affects Blue Coat Security Gateway OS versions 4.2 prior to 4.2.9, 5.2 prior to 5.2.5, and 5.3 prior to 5.3.1.7.
What type of vulnerability is CVE-2008-4485?
CVE-2008-4485 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.
Who can exploit CVE-2008-4485?
CVE-2008-4485 can be exploited by remote attackers targeting affected versions of the Blue Coat Security Gateway OS.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/bluecoat
- canonical/bluecoat security gateway os
- version/bluecoat security gateway os/4.2
- version/bluecoat security gateway os/5.2
- version/bluecoat security gateway os/5.3