CVE-2006-4958 Information

Description

Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors possibly involving (1) taarchives.cgi (2) ttaAuthentication.jsp (3) ttalicense.cgi (4) ttawlogin.cgi (5) ttawebtop.cgi (6) ttaabout.cgi or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available.

Reference

http://secunia.com/advisories/22037 http://securityreason.com/securityalert/1623 http://securitytracker.com/id?1016900 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102650-1 http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555 http://www.securityfocus.com/archive/1/446566/100/0/threaded http://www.securityfocus.com/bid/20135 http://www.securityfocus.com/bid/20276 http://www.vupen.com/english/advisories/2006/3739 https://exchange.xforce.ibmcloud.com/vulnerabilities/29070 https://exchange.xforce.ibmcloud.com/vulnerabilities/29303