Definition


New Search

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.

oval:org.mitre.oval:def:10455

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.

Family:
unix
Status:
ACCEPTED
Platform(s):
  • Oracle Linux 5
  • CentOS Linux 5
  • Red Hat Enterprise Linux 5
Class:
vulnerability
Reference(s):
  • CVE-2007-5496
Product(s):