Cisco Building Broadband Service Manager 5.x.
","content":"## Description\n\nUne vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans la gestion du param\u00e8tre msg par\nla page AccessCodeStart.asp dans Cisco Broadband Service Manager. Cette\nvuln\u00e9rabilit\u00e9 peut \u00eatre exploit\u00e9e afin de r\u00e9aliser une attaque par\ninjection de code indirecte (Cross Site Scripting).\n\n## Solution\n\nAppliquer la mise \u00e0 jour BBSMPatch5332.zip (cf. section Documentation).\n","cves":[{"name":"CVE-2008-2165","url":"https://www.cve.org/CVERecord?id=CVE-2008-2165"}],"links":[{"title":"Bulletin de s\u00e9curit\u00e9 Cisco (Bugtraq):","url":"http://archives.neohapsis.com/archives/bugtraq/2008-05/0183.html"},{"title":"Mise \u00e0 jour Cisco : http://tools.cisco.com/support/downloads/go/ImageList.x?relVer=5.3&mdfid=278455427&sftType=Building%20Broadband%20Service%20Manager%20(BBSM)%20Updates&optPlat=&nodecount=2&edesignator=null&modelName=Cisco%20Building%20Broadband%20Service%20Manager%205.3&treeMdfld=281527126&treeName=Network%20Monitoring%20and%20Management","url":"http://tools.cisco.com/support/downloads/go/[...]treeName=Network%20Monitoring%20and%20Management"},{"title":"Bulletin de s\u00e9curit\u00e9 Cisco (Bugtraq):","url":"http://archives.neohapsis.com/archives/bugtraq/2008-05/0166.html"}],"reference":"CERTA-2008-AVI-256","revisions":[{"description":"version initiale.","revision_date":"2008-05-20T00:00:00.000000"}],"risks":[{"description":"Contournement de la politique de s\u00e9curit\u00e9"}],"summary":"Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Cisco Broadband Service Manager.\nElle peut \u00eatre exploit\u00e9e afin de r\u00e9aliser des attaques par injection de\ncode indirecte (Cross Site Scripting).\n","title":"Vuln\u00e9rabilit\u00e9 de Cisco Building Broadband Service Manager","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 CISCO via Bugtraq du 14 mai 2008","url":null}]}