Lucene search

K
jvnJapan Vulnerability NotesJVN:80057925
HistoryDec 13, 2007 - 12:00 a.m.

JVN#80057925: Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"

2007-12-1300:00:00
Japan Vulnerability Notes
jvn.jp
6

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.646 Medium

EPSS

Percentile

97.9%

The Apache HTTP Server is open source web server software. The Apache HTTP Server modules mod_imap and mod_imagemap provide server-side imagemap processing capability.
The Apache HTTP Server modules mod_imap and mod_imagemap are vulnerable to cross-site scripting.

Impact

An arbitrary script can be executed on the userโ€™s web browser.

Solution

Apply the Patch
Apply the appropriate patches according to the information provided by the vendors.\n\n

Products Affected

  • Apache HTTP Server 2.2.6 and earlier
  • Apache HTTP Server 2.0.61 and earlier
  • Apache HTTP Server 1.3.39 and earlier
    For details, see the information provided by the vendors.

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.646 Medium

EPSS

Percentile

97.9%