CVE-2006-5416

Published: Oct 20, 2006Modified: Apr 23, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter.

Affected (1)

Products: F5: Firepass 1000

1 product

Firepass 1000

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
F5 Firepass 1000	Version 5.5

References (16)

http://secunia.com/advisories/22444/

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1752

Source: cve@mitre.org

http://securitytracker.com/id?1017076

Source: cve@mitre.org

http://www.procheckup.com/Vulner_PR0603b.php

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/448935/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20583

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/4083

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29631

Source: cve@mitre.org

http://secunia.com/advisories/22444/