CVE:CVE-2004-2757
CNNVD:CNNVD-200412-626
Novell iChain 2.2 build 2.2.113之前版本和2.3 First Customer Ship (FCS)的登录失败页面存在跨站脚本(XSS)漏洞。远程攻击者可以借助url参数注入任意web脚本或HTML。
solution:Upgrade novell ichain to a higher version than 2.2,*:sp1,*:sp1a,*:sp2,*:sp3,and avoid the version (,2.2],*:sp1,*:sp1a,*:sp2,*:sp3