Apache Team FoundationHTTPD:01842281F135E1B52B1456915C3D43DE

HistorySep 20, 2002 - 12:00 a.m.

Apache Httpd < 2.0.43 : Error page XSS using wildcard DNS

2002-09-2000:00:00

Apache Team Foundation

httpd.apache.org

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.971 High

EPSS

Percentile

99.8%

JSON

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is “Off” and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header.

CPENameOperatorVersion
apache httpdeq2.0.42
apache httpdeq2.0.40
apache httpdeq2.0.39
apache httpdeq2.0.37
apache httpdeq2.0.36
apache httpdeq2.0.35

Name	Operator	Version
apache httpd	eq	2.0.42
apache httpd	eq	2.0.40
apache httpd	eq	2.0.39
apache httpd	eq	2.0.37
apache httpd	eq	2.0.36
apache httpd	eq	2.0.35

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.971 High

EPSS

Percentile

99.8%

JSON

Related for HTTPD:01842281F135E1B52B1456915C3D43DE