Cross-Site Scripting Vulnerability in Infoblox DNS One
CVE-2004-0606

Currently unrated

Key Information:

Vendor: Infoblox
Status: Dns One Appliance
Vendor: CVE Published:; 6 December 2004

What is CVE-2004-0606?

The Infoblox DNS One contains a cross-site scripting (XSS) vulnerability, allowing remote attackers to execute arbitrary JavaScript code within the context of other users’ sessions. This issue can be exploited via specific DHCP request parameters, such as CLIENTID or HOSTNAME, leading to potential security breaches and unauthorized actions executed in users' browsers.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16456

vdb-entryx_refsource_XF

http://www.securityfocus.com/bid/10573

vdb-entryx_refsource_BID

http://marc.info/?l=bugtraq&m=108769996925349&w=2

mailing-listx_refsource_BUGTRAQ

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 6, 2004
Vulnerability Reserved
Jun 29, 2004

CVE-2004-0606 Data

JSON