Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-3352
HistoryDec 13, 2005 - 8:03 p.m.

CVE-2005-3352

2005-12-1320:03:00
CWE-79
[email protected]
web.nvd.nist.gov
1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.8 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON

Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.

Affected configurations

NVD
Node
apachehttp_serverRange<1.3.35
OR
apachehttp_serverRange2.0–2.0.56
OR
apachehttp_serverMatch2.2

References

Related

cve 1
centos 2
nessus 35
openvas 44
httpd 3
ubuntucve 1
jvn 1
slackware 1
debiancve 1
securityvulns 3
redhat 2
freebsd 1
cvelist 1
suse 1
debian 1
ubuntu 1
gentoo 1
osv 1
cert 1
oracle 1
cve
cve
CVE-2005-3352
2005-12-13 20:03:00
centos
centos
apache security update
2006-01-30 00:50:54
httpd, mod_ssl security update
2006-01-05 21:38:50
nessus
nessus
SuSE9 Security Update : Apache (YOU Patch Number 11489)
2009-09-24 00:00:00
Apache mod_imap Image Map Referer XSS
2008-03-25 00:00:00
RHEL 2.1 : apache (RHSA-2006:0158)
2006-01-17 00:00:00
openvas
openvas
Slackware Advisory SSA:2006-129-01 Apache httpd
2012-09-11 00:00:00
Slackware: Security Advisory (SSA:2006-129-01)
2012-09-10 00:00:00
SLES9: Security update for Apache
2009-10-10 00:00:00
httpd
httpd
Apache Httpd < 2.0.58 : mod_imap Referer Cross-Site Scripting
2005-11-01 00:00:00
Apache Httpd < 1.3.35 : mod_imap Referer Cross-Site Scripting
2005-11-01 00:00:00
Apache Httpd < 2.2.2 : mod_imap Referer Cross-Site Scripting
2005-11-01 00:00:00
ubuntucve
ubuntucve
CVE-2005-3352
2005-12-13 00:00:00
jvn
jvn
JVN#06045169 mod_imap cross-site scripting vulnerability
2005-12-15 00:00:00
slackware
slackware
[slackware-security] Apache httpd
2006-05-09 22:19:21
debiancve
debiancve
CVE-2005-3352
2005-12-13 20:03:00
securityvulns
securityvulns
[OpenPKG-SA-2005.029] OpenPKG Security Advisory &#40;apache&#41;
2005-12-16 00:00:00
About the security content of Security Update 2008-003 / Mac OS X 10.5.3
2008-05-30 00:00:00
Oracle / Sun / MySQL / PeopleSoft applications multiple security vulnerabilities
2013-08-12 00:00:00
redhat
redhat
(RHSA-2006:0158) apache security update
2006-01-17 00:00:00
(RHSA-2006:0159) httpd security update
2006-01-05 00:00:00
freebsd
freebsd
apache -- mod_imap cross-site scripting flaw
2005-11-01 00:00:00
cvelist
cvelist
CVE-2005-3352
2005-12-13 20:00:00
suse
suse
remote denial of service in apache,apache2
2006-07-28 14:21:14
debian
debian
[SECURITY] [DSA 1167-1] New apache packages fix several vulnerabilities
2006-09-04 15:08:06
ubuntu
ubuntu
Apache vulnerabilities
2006-01-13 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2006-02-06 00:00:00
osv
osv
apache - missing input sanitising
2006-09-04 00:00:00
cert
cert
Apache mod_rewrite contains off-by-one error in ldap scheme handling
2006-07-28 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.8 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON
Related for NVD:CVE-2005-3352
cve1centos2nessus35openvas44httpd3ubuntucve1jvn1slackware1debiancve1securityvulns3redhat2freebsd1cvelist1suse1debian1ubuntu1gentoo1osv1cert1oracle1