A vulnerability marked as critical has been reported in F5 FirePass 1000 5.5. This affects an unknown function of the file my.acctab.php3 of the component SSL VPN. The manipulation of the argument sid leads to basic cross site scripting.
This vulnerability is referenced as CVE-2006-5416. Remote exploitation of the attack is possible. Furthermore, an exploit is available.
It is suggested to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2006-5416 | F5 FirePass 1000 5.5 SSL VPN my.acctab.php3 sid cross site scripting (XFDB-29631 / BID-20583)
A vulnerability marked as critical has been reported in F5 FirePass 1000 5.5. This affects an unknown function of the file my.acctab.php3 of the component SSL…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Compliance, SLA & Vendor Adherence
Advisory-Prüfung · Score-Einordnung · Fristen
Advisory Radar
In herstellerseitiger Prüfung
Hersteller-Sicherheitsmeldungen & Patch-Status
Handlungsempfehlung für Administratoren
Hersteller-Advisory noch nicht formal hinterlegt. Regelmäßiges Re-Scanning der CTI-Quellen anberaumt.
Referenzen aus der Primärquelle („Verifiziert" nur bei Hersteller-Domäne):
-
Web Referencewww.procheckup.com
-
Web Referencewww.securityfocus.com
-
Web Referencewww.vupen.com
-
Web Referencesecunia.com
-
Web Referenceexchange.xforce.ibmcloud.com