Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://pridels.blogspot.com/2006/04/phpldapadmin-multiple-vuln.html http://www.frsirt.com/english/advisories/2006/1450 http://secunia.com/advisories/19747/
http://www.vuxml.org/freebsd/6d78202e-e2f9-11da-8674-00123ffe8333.html
Insight
The following package is affected: phpldapadmin098
CVE-2006-2016
Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dn parameter in (a) compare_form.php, (b) copy_form.php, (c) rename_form.php, (d) template_engine.php, and (e) delete_form.php
(2) scope parameter in (f) search.php
and (3)
Container DN, (4) Machine Name, and (5) UID Number fields in (g) template_engine.php.
Severity
Classification
-
CVE CVE-2006-2016 -
CVSS Base Score: 2.6
AV:N/AC:H/Au:N/C:N/I:P/A:N
Related Vulnerabilities