CVE-2008-0005

Опубликовано: 12 янв. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

Ссылки

http://docs.info.apple.com/article.html?artnum=307562
Broken Link
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
Broken Link
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html
Mailing List
Third Party Advisory
http://lists.vmware.com/pipermail/security-announce/2009/000062.html
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=124654546101607&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=124654546101607&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=125631037611762&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=125631037611762&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130497311408250&w=2
Issue Tracking
Mailing List
Third Party Advisory
http://secunia.com/advisories/28467
Not Applicable
http://secunia.com/advisories/28471
Not Applicable
http://secunia.com/advisories/28526
Not Applicable
http://secunia.com/advisories/28607
Not Applicable
http://secunia.com/advisories/28749
Not Applicable
http://secunia.com/advisories/28977
Not Applicable
http://secunia.com/advisories/29348
Not Applicable
http://secunia.com/advisories/29420
Not Applicable
http://secunia.com/advisories/29640
Not Applicable
http://secunia.com/advisories/30732
Not Applicable

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.0.35 (включая) до 2.0.63 (исключая)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

Версия от 2.2.0 (включая) до 2.2.8 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.0232

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2008-0005

ubuntu

больше 17 лет назад

CVE-2008-0005

redhat

больше 17 лет назад

CVE-2008-0005

debian

больше 17 лет назад

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-de ...

GHSA-m62c-mf8p-77p9

github

около 3 лет назад

ELSA-2008-0008

oracle-oval

больше 17 лет назад

ELSA-2008-0008: Moderate: httpd security update (MODERATE)

EPSS

Процентиль: 84%

0.0232

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79