What’s Vulnerable › Vulnerabilities

CVE-2005-0085

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-04-27 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

Affected products

• Htdig: 3.1.5, 3.1.5_7, 3.1.5_8, 3.1.6, 3.2.0, 3.2.0b2 (+4)
• Mandrakesoft Mandrake Linux: 10.0, 10.1
• Mandrakesoft Mandrake Linux Corporate Server: 2.1, 3.0
• RedHat Fedora Core: core_3.0
• Suse Linux: 8.0, 8.1, 8.2, 9.0, 9.1, 9.2

References

• http://secunia.com/advisories/14255
• http://secunia.com/advisories/14276
• http://secunia.com/advisories/14303
• http://secunia.com/advisories/14795
• http://secunia.com/advisories/15007
• http://secunia.com/advisories/17414
• http://secunia.com/advisories/17415
• http://securitytracker.com/id?1013078
• http://www.debian.org/security/2005/dsa-680
• http://www.gentoo.org/security/en/glsa/glsa-200502-16.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:063

Get alerted when CVE-2005-0085 or the next vulnerability affects your stack