apache -- mod_imap cross-site scripting flaw

2005-11-0100:00:00

vuxml.freebsd.org

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.016 Low

EPSS

Percentile

87.3%

JSON

The Apache HTTP Server Project reports:

A flaw in mod_imap when using the Referer directive with
image maps. In certain site configurations a remote
attacker could perform a cross-site scripting attack if a
victim can be forced to visit a malicious URL using
certain web browsers.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchapache= 1.3UNKNOWN
FreeBSDanynoarchapache< 1.3.34_3UNKNOWN
FreeBSDanynoarchapache+mod_perl< 1.3.34_1UNKNOWN
FreeBSDanynoarchapache_fp= 0UNKNOWN
FreeBSDanynoarchapache+ipv6< 1.3.37UNKNOWN
FreeBSDanynoarchru-apache< 1.3.34+30.22_1UNKNOWN
FreeBSDanynoarchru-apache+mod_ssl< 1.3.34+30.22+2.8.25_1UNKNOWN
FreeBSDanynoarchapache+ssl= 1.3.0UNKNOWN
FreeBSDanynoarchapache+ssl< 1.3.33.1.55_2UNKNOWN
FreeBSDanynoarchapache+mod_ssl< 1.3.34+2.8.25_1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	apache	= 1.3	UNKNOWN
FreeBSD	any	noarch	apache	< 1.3.34_3	UNKNOWN
FreeBSD	any	noarch	apache+mod_perl	< 1.3.34_1	UNKNOWN
FreeBSD	any	noarch	apache_fp	= 0	UNKNOWN
FreeBSD	any	noarch	apache+ipv6	< 1.3.37	UNKNOWN
FreeBSD	any	noarch	ru-apache	< 1.3.34+30.22_1	UNKNOWN
FreeBSD	any	noarch	ru-apache+mod_ssl	< 1.3.34+30.22+2.8.25_1	UNKNOWN
FreeBSD	any	noarch	apache+ssl	= 1.3.0	UNKNOWN
FreeBSD	any	noarch	apache+ssl	< 1.3.33.1.55_2	UNKNOWN
FreeBSD	any	noarch	apache+mod_ssl	< 1.3.34+2.8.25_1	UNKNOWN