{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow (2) remote authenticated administrators to inject arbitrary web script or HTML via a Messages field to the servermanager program."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-12-31T11:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://sadgeeksinsnow.blogspot.com/2012/12/persistence-is-key-another-bug-hunt.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.cerberusftp.com/products/releasenotes.html"}, {"name": "20121219 Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2012-12/0118.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2012-6339", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow (2) remote authenticated administrators to inject arbitrary web script or HTML via a Messages field to the servermanager program."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://sadgeeksinsnow.blogspot.com/2012/12/persistence-is-key-another-bug-hunt.html", "refsource": "MISC", "url": "http://sadgeeksinsnow.blogspot.com/2012/12/persistence-is-key-another-bug-hunt.html"}, {"name": "http://www.cerberusftp.com/products/releasenotes.html", "refsource": "CONFIRM", "url": "http://www.cerberusftp.com/products/releasenotes.html"}, {"name": "20121219 Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-12/0118.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:28:39.586Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://sadgeeksinsnow.blogspot.com/2012/12/persistence-is-key-another-bug-hunt.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.cerberusftp.com/products/releasenotes.html"}, {"name": "20121219 Multiple XSS vulnerabilities in Cerberus FTP Server <= 5.0.5.1 [CVE-2012-6339]", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2012-12/0118.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2012-6339", "datePublished": "2012-12-31T11:00:00Z", "dateReserved": "2012-12-13T00:00:00Z", "dateUpdated": "2024-09-16T20:16:37.402Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cerberusftp:ftp_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "16EC2674-0732-409E-9367-C710AF862DE6", "versionEndIncluding": "5.0.5.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.0:-:*:*:*:*:*:*", "matchCriteriaId": "B584BB0D-C9F0-42E4-8CB2-F7AFB31884A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.01:*:*:*:*:*:*:*", "matchCriteriaId": "E35C53A7-91D6-46F3-B294-07FCB721AF05", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "664176FA-1775-46AF-9EA2-3B5C96A36A05", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "D6D98E88-557E-4249-8D30-4F1EE7ECE5C5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.02:*:*:*:*:*:*:*", "matchCriteriaId": "7097C6AD-6BE7-4267-9C88-E097A0CFC0EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.03:*:*:*:*:*:*:*", "matchCriteriaId": "80EB8701-85F8-4BA5-8A93-1B47E655B8B9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.5:*:*:*:*:*:*:*", "matchCriteriaId": "207A3423-BE63-4B3A-BC28-8643048C096F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.05:*:*:*:*:*:*:*", "matchCriteriaId": "91BB1247-BE77-4075-B6AE-5E28A3D9B594", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.6:beta:*:*:*:*:*:*", "matchCriteriaId": "D69CDFCD-ACA9-42E9-BBD8-90F6A69E4468", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.7:*:*:*:*:*:*:*", "matchCriteriaId": "9590014E-7F1A-4799-80FE-9041192D3CBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.22:*:*:*:*:*:*:*", "matchCriteriaId": "67B56FFF-E508-476D-B2AD-24DC999F3582", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:1.71:*:*:*:*:*:*:*", "matchCriteriaId": "CA0854BD-2D96-403C-BB22-BC1BE162E241", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "1B36CD14-4E0E-4238-9AEA-37D879F995A2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "3B0F42BB-61DB-4268-9092-05052D478AB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "819A6EF5-107C-47DF-BFFD-5BA29428F280", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "117D42CD-F063-41CD-AABF-A0C96E35D838", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "62D032F0-28E2-4EB2-A3DC-67413BF08C4D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "5EEDD9AC-75E7-49F3-9362-D4B99A944C3A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.01:*:*:*:*:*:*:*", "matchCriteriaId": "9B1DCA79-73FA-46D4-AF57-074373DE7503", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.02:*:*:*:*:*:*:*", "matchCriteriaId": "80D47E85-BB68-4C4D-8888-25422AC4B76D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.2:*:*:*:*:*:*:*", "matchCriteriaId": "7E842263-7AF3-463D-814D-F63199F3C21B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.02:beta:*:*:*:*:*:*", "matchCriteriaId": "C63CED4F-F823-4310-AD78-11B5C82167E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.2:beta1:*:*:*:*:*:*", "matchCriteriaId": "3445BC51-DB9F-4E14-B0DE-806FBCD9641E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.2:beta2:*:*:*:*:*:*", "matchCriteriaId": "B7454163-9481-4CBD-85CB-9C6798181E05", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.2:beta3:*:*:*:*:*:*", "matchCriteriaId": "3F169EEB-89E1-4248-A185-38433D1A8573", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.3:*:*:*:*:*:*:*", "matchCriteriaId": "AD5D97C7-5A06-44EF-BF46-F5DE3C30F16E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.4:*:*:*:*:*:*:*", "matchCriteriaId": "DC1FA9C0-77D0-403C-ADED-7D9E89BFFC96", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.4:beta1:*:*:*:*:*:*", "matchCriteriaId": "C4B7B5AB-3C5E-4D9A-816C-892FD4DA3284", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.4:beta2:*:*:*:*:*:*", "matchCriteriaId": "EBF4BA1E-5B31-42FD-897A-455FDF9C0A15", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.4:beta3:*:*:*:*:*:*", "matchCriteriaId": "FCE4860E-8A9F-4E38-81DC-291F317E8700", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.11:*:*:*:*:*:*:*", "matchCriteriaId": "35F0613F-FD01-4E57-BD8F-181DC14A948C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.11:beta:*:*:*:*:*:*", "matchCriteriaId": "620FAAEE-A52D-4710-BCB0-3D07F1453BF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.11:beta2:*:*:*:*:*:*", "matchCriteriaId": "FBE8B552-FA88-4C5C-9296-6BC9908E3F2C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.15:*:*:*:*:*:*:*", "matchCriteriaId": "B752D925-6A84-4885-A697-D868C06B1E25", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.15:beta:*:*:*:*:*:*", "matchCriteriaId": "29440529-9BDA-4738-853E-85E54CB951C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.16:*:*:*:*:*:*:*", "matchCriteriaId": "8C3E6A73-0475-46AB-9B88-690A39D3E411", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.21:*:*:*:*:*:*:*", "matchCriteriaId": "1CF2C736-C686-4501-A4AE-227ABC218EBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.22:*:*:*:*:*:*:*", "matchCriteriaId": "1F59FE48-F91C-45FD-BB3C-4F5186C430D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.23:beta:*:*:*:*:*:*", "matchCriteriaId": "EEA0F5DF-228C-4F01-8A8F-90A9A6FBDF10", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.31:*:*:*:*:*:*:*", "matchCriteriaId": "9D0D9A2E-6B38-437F-B89C-AC7546057B6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.32:*:*:*:*:*:*:*", "matchCriteriaId": "2093E888-B80F-4318-AD14-CE0295E3B0E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.41:*:*:*:*:*:*:*", "matchCriteriaId": "E6B0C7F7-9349-4AC9-8D74-E2C8AB1F0C13", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.42:*:*:*:*:*:*:*", "matchCriteriaId": "23B56CAD-6783-46E5-A82D-EB2A14A8A354", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.43:*:*:*:*:*:*:*", "matchCriteriaId": "14182912-05FE-4CD3-B457-6EFF91D8DF42", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.44:*:*:*:*:*:*:*", "matchCriteriaId": "2B06481D-2BB9-4A56-AE8B-1A264B4EE207", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.45:*:*:*:*:*:*:*", "matchCriteriaId": "FB03F569-A146-4D9D-B065-46D95BE8FDF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.46:*:*:*:*:*:*:*", "matchCriteriaId": "543E96D3-6882-405C-9E9C-0B36D426C0F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.47:*:*:*:*:*:*:*", "matchCriteriaId": "C87C96DD-5302-45CB-B95D-3D174420CE99", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.48:*:*:*:*:*:*:*", "matchCriteriaId": "C8F27A27-2596-4562-B739-083EBF272763", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.49:*:*:*:*:*:*:*", "matchCriteriaId": "01A7296B-F5F4-43E2-8527-304EEA996629", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:2.50:*:*:*:*:*:*:*", "matchCriteriaId": "1ABED3D7-4B80-46D8-88F4-0F66510D2E2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "6BC21599-EB4C-49CD-A046-13148102E43F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "363BB778-0C5C-4FEC-BC82-250C026BDE06", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "0761D7FE-1EB2-4D94-BD38-2F7B8AA8970B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "883FE03E-555B-49E7-BECA-8554F05D007E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "E9C71CB9-59D4-44BC-BD79-2E3004D3A1C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "5512BB61-B912-407F-8398-E49D05B2887C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "BDC63773-FBA3-45CF-95DC-AE86D621217E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "9EF37E3B-B1E3-4200-9A5B-34FCBFAC830A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "4BF3E234-FB2A-4906-A3E2-E08A8BCDB1BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "074DDB0D-D55A-4BB5-AF54-82AE2453AB0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1:*:*:*:*:*:*:*", "matchCriteriaId": "A7816C89-2D67-463E-B2B7-B4ACEB24F89B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "9CC79111-1B16-4C8D-BEF3-578789D7F662", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "D846F22D-3BED-4D12-8B0D-99AF20FF1FA8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "0EC052F4-074D-4A1C-ACF9-628782345430", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "B0923BF4-AC10-4DC0-BF1B-6AE80D5C51B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "CE2E29B7-BB38-430B-949A-EDCA45833CCE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "1AE9FE3C-8ED8-4CDA-B032-42BEB08C446D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "39D76CD3-EBAB-4847-A570-D2C0C5B0DC7F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:3.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "837B942E-8815-4C27-ABF1-4B3131C3CFD8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "3F3EBCA3-E786-49CB-8CAF-34D35D4A3C83", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "FB613A86-7837-4C5B-9194-3238D9BD2F45", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "018B6603-904D-42FA-B1C3-6EAD3CE6B8E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "A2738E91-6B27-4918-8CFD-FB17685D431A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "BA7BCD1A-8EC9-4527-AA66-A3C109D6064C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "A46EFDE2-8E57-4102-8DC0-F8D626D5C052", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "281FCCA7-0558-4230-A295-43D8588103A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "EB7F85EE-3412-467E-A3B5-D9828CBCE31C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "FBE639D4-7B95-4E0A-8E34-A33D25F7EFB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "09EA34D5-8971-4598-8E2E-9F1973FAAF85", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "69FD01B8-433E-4B59-905A-8DF551CD43C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "93386E63-3C83-482B-91F8-7704A745800B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "DED5E085-CB4C-44F0-8D25-B1935BCE9B05", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "129741B3-DFF2-4C3B-92B0-1A90A90CB187", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "D4E68E07-9DFF-4CBB-9406-993BAB410283", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "8FE83C39-D8DE-438A-9824-3A2BC59964A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "8B922D0B-9CE7-4552-934B-F866DD71CD0B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "51B49901-8986-406A-815D-0947FFB88858", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "065469E4-EEE0-49C8-9D2F-63DA7EEEF756", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "B8D3ABA6-E073-4DAE-844F-321EC84A97B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "E6F5D3C9-56C8-4C01-9FA3-71E762E55C78", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "39C69F94-7241-4B1D-AADE-B3328A27E3BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "310F8782-35A7-46A4-9208-7977C61E9AA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "AECBA99E-A537-4391-A9BF-31D7D9EDCE4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.7.2:*:*:*:*:*:*:*", "matchCriteriaId": "DC338A9F-C403-45CF-B062-D3257ADA241C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.7.3:*:*:*:*:*:*:*", "matchCriteriaId": "EF33BA84-B143-4572-BEFE-38800FA772B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.7.5:*:*:*:*:*:*:*", "matchCriteriaId": "DF05545C-F038-4648-AB76-E1BC95FF3B9F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.7.6:*:*:*:*:*:*:*", "matchCriteriaId": "AEA32627-DD58-45EF-935B-B80BBF3DF753", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "E2CF0B13-2065-416A-81B1-BC3ED89EBC3F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "9BF38887-2D37-4C0D-9E4F-74EDCEB16E34", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "7519FDD8-80D4-4D11-9E38-60F840FDD1A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.0:*:*:*:*:*:*:*", "matchCriteriaId": "F5065398-8567-4D94-AF27-6278B0C8A5A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.1:*:*:*:*:*:*:*", "matchCriteriaId": "8A82ECD7-F3A9-41D0-95F3-E1A853145B22", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.2:*:*:*:*:*:*:*", "matchCriteriaId": "6CD1C772-8386-49A3-8462-CD5462F0A90E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.3:*:*:*:*:*:*:*", "matchCriteriaId": "6B16B54C-EEE2-4C08-9BB0-DA985343DB2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.4:*:*:*:*:*:*:*", "matchCriteriaId": "15022759-10A0-42F5-8F90-5ECCF0B4715F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.5:*:*:*:*:*:*:*", "matchCriteriaId": "C35E71A4-786F-4861-B189-E253BB570678", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.6:*:*:*:*:*:*:*", "matchCriteriaId": "F26468C8-BBCA-4E3B-BBC7-F0E5CDFC55BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.7:*:*:*:*:*:*:*", "matchCriteriaId": "87FF2131-233B-4941-8173-F23CEFD5D020", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.9.8:*:*:*:*:*:*:*", "matchCriteriaId": "10BA3A18-9068-44B3-BCB9-CA5104EFD895", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.10.0:*:*:*:*:*:*:*", "matchCriteriaId": "85B632D6-B6B5-4972-AC04-0FF468FA2C32", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:4.0.11.0:*:*:*:*:*:*:*", "matchCriteriaId": "56FF0CD9-2953-4D05-A18E-19F9426B9B82", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7E2E1E01-7F35-4ABA-9105-ECBB68899485", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "53024BD3-68C8-4C0B-BC6A-47B495094FFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "D5022CA1-F5D4-430F-AFEA-52575FDCD7E1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "14FC2D7A-34EB-4C56-BE7E-B131DBA817B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "B911C27F-79B8-4362-99F1-A54A50CB2BF7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "F1EFBAB9-CE22-41A2-8F31-322DD10B06E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "5B4BDBF7-337C-4CC0-8C9B-062CA6B1C254", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "3AECC625-FB34-468D-8FE9-B47C06F964F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "7BEF8406-AABD-4662-A120-DB62B4777FCD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "F391EB76-A9CC-4E3F-8174-980FCB715847", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "C05E2DDE-FD5A-4BDB-BDE4-8E2B0C26F77F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "A695B11F-7EA3-4F25-9235-806132131EF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "765B829B-78E8-4D5D-B0BF-70E6E6896FF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "588137BE-E566-4265-8AF8-BB0AF4F3AC88", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "8CD056AD-E033-457E-879C-59E113347606", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "3185B882-BA96-47F2-BFB3-15F54B87B30D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "3394D029-0A78-4F60-BEBE-B00F52145B95", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "12194BA4-8824-41F1-B2A7-CB9E4E690D33", "vulnerable": true}, {"criteria": "cpe:2.3:a:cerberusftp:ftp_server:5.0.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "C0BF8C91-C6C8-4457-A6B6-0EEFE60439B1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in Cerberus FTP Server before 5.0.6.0 allow (1) remote attackers to inject arbitrary web script or HTML via a log entry that is not properly handled within the Log Manager component, and might allow (2) remote authenticated administrators to inject arbitrary web script or HTML via a Messages field to the servermanager program."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en la interfaz web administrativa de Cerberus FTP Server antes de v5.0.6.0 permite (1) atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de una entrada de registro que no se utilizan con cuidado dentro del componente Log Manager, y podr\u00eda permitir (2) a los administradores remotos autenticados inyectar secuencias de comandos web o HTML a trav\u00e9s de un campo Messages al programa servermanager."}], "id": "CVE-2012-6339", "lastModified": "2012-12-31T11:50:28.453", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2012-12-31T11:50:28.453", "references": [{"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/bugtraq/2012-12/0118.html"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://sadgeeksinsnow.blogspot.com/2012/12/persistence-is-key-another-bug-hunt.html"}, {"source": "cve@mitre.org", "url": "http://www.cerberusftp.com/products/releasenotes.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}