Lucene search
Apache Team FoundationHTTPD:007193648BB39712DF32CAE9B6A1C1F0HistoryDec 15, 2007 - 12:00 a.m.
Apache Httpd < 2.0.63 : mod_status XSS
2007-12-1500:00:00
Apache Team Foundation
httpd.apache.org
24
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.764
Percentile
98.2%
A flaw was found in the mod_status module. On sites where mod_status is enabled and the status pages were publicly accessible, a cross-site scripting attack is possible. Note that the server-status page is not enabled by default and it is best practice to not make this publicly available.
Affected configurations
Node
apacheapache_httpdMatch2.0.61
ORapacheapache_httpdMatch2.0.59
ORapacheapache_httpdMatch2.0.58
ORapacheapache_httpdMatch2.0.55
ORapacheapache_httpdMatch2.0.54
ORapacheapache_httpdMatch2.0.53
ORapacheapache_httpdMatch2.0.52
ORapacheapache_httpdMatch2.0.51
ORapacheapache_httpdMatch2.0.50
ORapacheapache_httpdMatch2.0.49
ORapacheapache_httpdMatch2.0.48
ORapacheapache_httpdMatch2.0.47
ORapacheapache_httpdMatch2.0.46
ORapacheapache_httpdMatch2.0.45
ORapacheapache_httpdMatch2.0.44
ORapacheapache_httpdMatch2.0.43
ORapacheapache_httpdMatch2.0.42
ORapacheapache_httpdMatch2.0.40
ORapacheapache_httpdMatch2.0.39
ORapacheapache_httpdMatch2.0.37
ORapacheapache_httpdMatch2.0.36
ORapacheapache_httpdMatch2.0.35
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apache | apache_httpd | 2.0.61 | cpe:2.3:a:apache:apache_httpd:2.0.61:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.59 | cpe:2.3:a:apache:apache_httpd:2.0.59:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.58 | cpe:2.3:a:apache:apache_httpd:2.0.58:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.55 | cpe:2.3:a:apache:apache_httpd:2.0.55:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.54 | cpe:2.3:a:apache:apache_httpd:2.0.54:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.53 | cpe:2.3:a:apache:apache_httpd:2.0.53:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.52 | cpe:2.3:a:apache:apache_httpd:2.0.52:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.51 | cpe:2.3:a:apache:apache_httpd:2.0.51:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.50 | cpe:2.3:a:apache:apache_httpd:2.0.50:*:*:*:*:*:*:* |
| apache | apache_httpd | 2.0.49 | cpe:2.3:a:apache:apache_httpd:2.0.49:*:*:*:*:*:*:* |
Related
seebug
seebug
Apache HTTP Server 2.2.6, 2.0.61和1.3.39 'mod_status'跨站脚本漏洞
2008-01-14 00:00:00
debiancve
debiancve
CVE-2007-6388
2008-01-08 18:46:00
prion
prion
Cross site scripting
2008-01-08 18:46:00
nvd
nvd
CVE-2007-6388
2008-01-08 18:46:00
cve
cve
CVE-2007-6388
2008-01-08 18:46:00
openvas
openvas
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
Slackware Advisory SSA:2008-210-02 httpd
2012-09-11 00:00:00
securityvulns
securityvulns
SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS)
2008-01-16 00:00:00
[security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)
2008-11-21 00:00:00
HP OpenView Network Node Manager crossite scripting
2008-11-21 00:00:00
ubuntucve
ubuntucve
CVE-2007-6388
2008-01-08 00:00:00
httpd
httpd
Apache Httpd < 2.2.8 : mod_status XSS
2007-12-15 00:00:00
Apache Httpd < 1.3.41 : mod_status XSS
2007-12-15 00:00:00
cvelist
cvelist
CVE-2007-6388
2008-01-08 18:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:19:35
slackware
slackware
[slackware-security] httpd
2008-07-29 05:31:49
[slackware-security] apache
2008-02-15 01:23:13
[slackware-security] httpd
2008-02-15 01:22:54
nessus
nessus
Slackware 12.0 / 12.1 / current : httpd (SSA:2008-210-02)
2008-07-29 00:00:00
RHEL 2.1 : apache (RHSA-2008:0004)
2008-01-15 00:00:00
redhat
redhat
(RHSA-2008:0007) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0004) Moderate: apache security update
2008-01-15 00:00:00
(RHSA-2008:0006) Moderate: httpd security update
2008-01-15 00:00:00
centos
centos
apache security update
2008-01-16 02:42:35
httpd, mod_ssl security update
2008-01-15 13:48:01
httpd, mod_ssl security update
2008-01-15 12:48:29
oraclelinux
oraclelinux
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: httpd-2.2.8-1.fc8
2008-02-16 02:11:16
[SECURITY] Fedora 7 Update: httpd-2.2.8-1.fc7
2008-02-16 02:08:32
suse
suse
cross site scripting in apache2,apache
2008-04-04 16:29:16
vmware
vmware
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2008-02-04 00:00:00
osv
osv
apache2-2.4.49-1.1 on GA media
2024-06-15 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.764
Percentile
98.2%
Related for HTTPD:007193648BB39712DF32CAE9B6A1C1F0