Sign-up

ID

VAR-200412-0234


CVE

CVE-2004-2508


TITLE

Linksys Web Camera Software Next_file Parametric cross-site scripting vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200412-280

DESCRIPTION

Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the next_file parameter. The problem presents itself when an attacker passes malicious HTML or script code to the application via the 'next_file' parameter of the 'main.cgi' script. Linksys Web Camera software version 2.10 is reportedly prone to this issue, however, it is possible that other versions are affected as well

Trust: 1.26

sources: NVD: CVE-2004-2508 // BID: 10533 // VULHUB: VHN-10936

AFFECTED PRODUCTS

vendor:linksysmodel:wvc11bscope:eqversion:2.10

Trust: 1.6

vendor:linksysmodel:web camera softwarescope:eqversion:2.10

Trust: 0.3

sources: BID: 10533 // CNNVD: CNNVD-200412-280 // NVD: CVE-2004-2508

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2004-2508
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-200412-280
value: MEDIUM

Trust: 0.6

VULHUB: VHN-10936
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2004-2508
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-10936
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-10936 // CNNVD: CNNVD-200412-280 // NVD: CVE-2004-2508

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-2508

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200412-280

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-200412-280

EXPLOIT AVAILABILITY

sources:
            
            
            VULHUB: VHN-10936

EXTERNAL IDS
db:BIDid:10533
Trust: 2.0
db:SECUNIAid:11881
Trust: 1.7
db:SECTRACKid:1010424
Trust: 1.7
db:NVDid:CVE-2004-2508
Trust: 1.7
db:CNNVDid:CNNVD-200412-280
Trust: 0.7
db:XFid:16415
Trust: 0.6
db:BUGTRAQid:20040613 LINKSYS WEB CAMERA CROSS-SITE SCRIPTING VULN
Trust: 0.6
db:SEEBUGid:SSVID-77930
Trust: 0.1
db:EXPLOIT-DBid:24197
Trust: 0.1
db:VULHUBid:VHN-10936
Trust: 0.1
sources:
            
            
            VULHUB: VHN-10936 // 
            
            
            
            BID: 10533 // 
            
            
            
            CNNVD: CNNVD-200412-280 // 
            
            
            
            NVD: CVE-2004-2508

REFERENCES
url:http://www.securityfocus.com/bid/10533
Trust: 1.7
url:http://archives.neohapsis.com/archives/bugtraq/2004-06/0215.html
Trust: 1.7
url:http://securitytracker.com/id?1010424
Trust: 1.7
url:http://secunia.com/advisories/11881
Trust: 1.7
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/16415
Trust: 1.1
url:http://xforce.iss.net/xforce/xfdb/16415
Trust: 0.6
url:http://www.linksys.com/
Trust: 0.3
url:/archive/1/365947
Trust: 0.3
sources:
            
            
            VULHUB: VHN-10936 // 
            
            
            
            BID: 10533 // 
            
            
            
            CNNVD: CNNVD-200412-280 // 
            
            
            
            NVD: CVE-2004-2508

CREDITS
Discovery is credited to Tyler Guenter aka scriptX <scriptX_@hotmail.com>.
Trust: 0.9
sources:
            
            
            BID: 10533 // 
            
            
            
            CNNVD: CNNVD-200412-280

SOURCES
db:VULHUBid:VHN-10936
db:BIDid:10533
db:CNNVDid:CNNVD-200412-280
db:NVDid:CVE-2004-2508

LAST UPDATE DATE
2024-08-14T14:00:44.369000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-10936date:2017-07-11T00:00:00
db:BIDid:10533date:2004-06-14T00:00:00
db:CNNVDid:CNNVD-200412-280date:2006-01-25T00:00:00
db:NVDid:CVE-2004-2508date:2017-07-11T01:31:57.750

SOURCES RELEASE DATE
db:VULHUBid:VHN-10936date:2004-12-31T00:00:00
db:BIDid:10533date:2004-06-14T00:00:00
db:CNNVDid:CNNVD-200412-280date:2004-12-31T00:00:00
db:NVDid:CVE-2004-2508date:2004-12-31T05:00:00