CVE-2005-0085: Htdig

Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in ht://dig (htdig) before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message.

Affected products

• Htdig Htdig: version 3.1.5 only; version 3.1.5_7 only; version 3.1.5_8 only; version 3.1.6 only; version 3.2.0 only; version 3.2.0b2 only; …
• Mandrakesoft Mandrake Linux: version 10.0 only; version 10.1 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only; version 3.0 only
• Red Hat Fedora Core: version core_3.0 only
• Suse Suse Linux: version 8.0 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only; version 9.2 only

Published 2005-04-27. Last modified 2026-06-16.