CVE-2005-2861

Published: Sep 8, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in N-Stealth Commercial Edition before 5.8.0.38 and Free Edition before 5.8.1.03 allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response header, which is directly injected into an HTML report.

Affected (2)

Products: N Stalker: N Stealth

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
N Stalker N Stealth	Version commercial_5.8
N Stalker N Stealth	Version free_5.8

References (6)

http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/14717

Source: cve@mitre.org

Patch

http://seclists.org/lists/vulnwatch/2005/Jul-Sep/0032.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.cybsec.com/vuln/010905-multiple_webscanner_script_injection.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchVendor Advisory

http://www.securityfocus.com/bid/14717

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.