CVE-2005-0085

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote...

6.8 MediumFix available

CVE-2005-0085 is a medium vulnerability (CVSS 6.8) in Htdig, published February 14, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.27%, the 83rd percentile. Fixed in htdig 1:3.1.6-11.

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

Exploit likelihood

2.27%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2005-0085
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-0085
Updated: 2026-11-02

EUVDEUVD-2005-0086 No score

Record: EUVD-2005-0086
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qpr6-prp3-323r No score

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote...

Record: GHSA-qpr6-prp3-323r
Updated: 2026-11-02

OSV No score

Record: CVE-2005-0085
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-0085 No score

Record: DEBIAN-CVE-2005-0085
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`htdig` Debian:12	before 1:3.1.6-11	1:3.1.6-11
`htdig` Debian:13	before 1:3.1.6-11	1:3.1.6-11
`htdig` Debian:14	before 1:3.1.6-11	1:3.1.6-11
`htdig` Debian:3.0	before 3.1.6-3woody1, plus listed versions 3.1.6-3	3.1.6-3woody1
`htdig` Red Hat:enterprise_linux:4::as	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-debuginfo` Red Hat:enterprise_linux:4::as	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-web` Red Hat:enterprise_linux:4::as	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig` Red Hat:enterprise_linux:4::desktop	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-debuginfo` Red Hat:enterprise_linux:4::desktop	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-web` Red Hat:enterprise_linux:4::desktop	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1

Show 6 moreShow less

Affected packages
Package	Affected	Fixed
`htdig` Red Hat:enterprise_linux:4::es	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-debuginfo` Red Hat:enterprise_linux:4::es	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-web` Red Hat:enterprise_linux:4::es	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig` Red Hat:enterprise_linux:4::ws	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-debuginfo` Red Hat:enterprise_linux:4::ws	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1
`htdig-web` Red Hat:enterprise_linux:4::ws	before 3:3.2.0b6-3.40.1	3:3.2.0b6-3.40.1

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 22 moreShow less