-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

______________________________________________________________________________

       SCO Security Advisory

Subject:    OpenServer 5.0.7 OpenServer 6.0.0 : Cross-site Scripting Vulnerability in docview (htdig)
Advisory number:   SCOSA-2005.46
Issue date:     2005 November 02
Cross reference:  sr893247 fz531484 erg712808
       CVE-2005-0085
______________________________________________________________________________


1. Problem Description

   Cross-site scripting vulnerability in docview (htdig) allows
   remote attackers to execute arbitrary web script or HTML via the
   config parameter, which is not properly sanitized before it is
   displayed in an error message.

   The Common Vulnerabilities and Exposures project (cve.mitre.org)
   has assigned the name CVE-2005-0085 to this issue.


2. Vulnerable Supported Versions

   System        Binaries
   ----------------------------------------------------------------------
   OpenServer 5.0.7     /usr/bin/htsearch
   OpenServer 6.0.0     /usr/bin/htsearch


3. Solution

   The proper solution is to install the latest packages.


4. OpenServer 5.0.7

   4.1 Location of Fixed Binaries

   ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/507


   4.2 Verification

   MD5 (VOL.000.000) = 535ce06b97643d63419f33c68e04fbea

   md5 is available for download from
     ftp://ftp.sco.com/pub/security/tools


   4.3 Installing Fixed Binaries

   Upgrade the affected binaries with the following sequence:

   1) Download the VOL* files to a directory

   2) Run the custom command, specify an install from media images,
   and specify the directory as the location of the images.


5. OpenServer 6.0.0

   5.1 Location of Fixed Binaries

   ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.46/600


   5.2 Verification

   MD5 (VOL.000.000) = f9f0191b869256f953d082281c4dec26

   md5 is available for download from
     ftp://ftp.sco.com/pub/security/tools


   5.3 Installing Fixed Binaries

   Upgrade the affected binaries with the following sequence:

   1) Download the VOL* files to a directory

   2) Run the custom command, specify an install from media images,
   and specify the directory as the location of the images.


6. References

   Specific references for this advisory:
     http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0085
     http://securitytracker.com/id?1013078
     http://xforce.iss.net/xforce/xfdb/19223

   SCO security resources:
     http://www.sco.com/support/security/index.html

   SCO security advisories via email
     http://www.sco.com/support/forums/security.html

   This security fix closes SCO incidents sr893247 fz531484
   erg712808.


7. Disclaimer

   SCO is not responsible for the misuse of any of the information
   we provide on this website and/or through our security
   advisories. Our advisories are a service to our customers
   intended to promote secure installation and use of SCO
   products.


8. Acknowledgments

   SCO would like to thank Michael Krax for reporting this
   vulnerability.

______________________________________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (UnixWare)

iD8DBQFDaSgLaqoBO7ipriERAkmPAJ9HWEVyA2yson0qHAbIJoKE6ct+sQCfTbjD
kD0DGwVKHFwdrQhglWx/z5M=
=lvQZ
-----END PGP SIGNATURE-----