Lucene search

K
freebsdFreeBSD4A638895-41B7-11DE-B1CC-00219B0FC4D8
HistoryFeb 28, 2009 - 12:00 a.m.

mod_perl -- cross-site scripting

2009-02-2800:00:00
vuxml.freebsd.org
6

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.1%

Secunia reports:

Certain input passed to the “Apache::Status” and “Apache2::Status”
modules is not properly sanitised before being returned to the user.
This can be exploited to execute arbitrary HTML and script code in a
user’s browser session in context of an affected website.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmod_perl< 1.31UNKNOWN
FreeBSDanynoarchmod_perl2< 2.05UNKNOWN

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.01 Low

EPSS

Percentile

83.1%