Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.

The version of htdig installed on the remote host is prior to 3.2.0b6. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-206-01 advisory.

    New htdig packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the htdig security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2007-1095 advisory.

    [3:3.2.0b6-4]
     - CVE-2007-6110

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A cross-site scripting flaw was discovered in a htdig search page. An attacker could construct a carefully crafted URL, which once visited by an unsuspecting user, could cause a user's Web browser to execute malicious script in the context of the visited htdig search Web page.
(CVE-2007-6110)

Updated htdig packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

The ht://Dig system is a complete World Wide Web indexing and searching system for a small domain or intranet.

A cross-site scripting flaw was discovered in a htdig search page. An attacker could construct a carefully crafted URL, which once visited by an unsuspecting user, could cause a user's Web browser to execute malicious script in the context of the visited htdig search Web page.
(CVE-2007-6110)

Users of htdig are advised to upgrade to these updated packages, which contain backported patch to resolve this issue.

A flaw in the htsearch Program could be exploited by attackers to conduct cross-site scripting (XSS) attacks. (CVE-2007-6110)

Michael Skibbe discovered that htdig, a WWW search system for an intranet or small internet, did not adequately quote values submitted to the search script, allowing remote attackers to inject arbitrary script or HTML into specially crafted links.

- fixed CVE-2007-6110

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The htsearch CGI script is accessible through the remote web server. htsearch is a component of ht://Dig used to index and search documents such as web pages. 

The version of htsearch installed on the remote host fails to sanitize user-supplied input to the 'sort' parameter before using it to generate dynamic output.  An unauthenticated, remote attacker may be able to leverage this issue to inject arbitrary HTML or script code into a user's browser to be executed within the security context of the affected site.

ID	Name	Product	Family	Severity
204679	Slackware Linux 15.0 / current htdig Vulnerability (SSA:2024-206-01)	Nessus	Slackware Local Security Checks	medium
67618	Oracle Linux 5 : Moderate: / htdig (ELSA-2007-1095)	Nessus	Oracle Linux Local Security Checks	medium
60319	Scientific Linux Security Update : htdig on SL5.x, SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
43662	CentOS 4 / 5 : htdig (CESA-2007:1095)	Nessus	CentOS Local Security Checks	medium
29461	SuSE 10 Security Update : htdig (ZYPP Patch Number 4761)	Nessus	SuSE Local Security Checks	medium
29337	Debian DSA-1429-1 : htdig - XSS	Nessus	Debian Local Security Checks	medium
29204	RHEL 4 / 5 : htdig (RHSA-2007:1095)	Nessus	Red Hat Local Security Checks	medium
29198	Fedora Core 6 : htdig-3.2.0b6-9.fc6 (2007-757)	Nessus	Fedora Local Security Checks	medium
28334	ht://dig htsearch sort Parameter XSS	Nessus	CGI abuses : XSS	medium

Detections

Analytics

CVE-2007-6110

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium