Lucene search
GoogleOSV:DSA-1167-1HistorySep 04, 2006 - 12:00 a.m.
apache - missing input sanitising
2006-09-0400:00:00
Google
osv.dev
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Several remote vulnerabilities have been discovered in the Apache, the
worlds most popular webserver, which may lead to the execution of arbitrary
web script. The Common Vulnerabilities and Exposures project identifies
the following problems:
- CVE-2005-3352
A cross-site scripting (XSS) flaw exists in the mod_imap component of
the Apache server. - CVE-2006-3918
Apache does not sanitize the Expect header from an HTTP request when
it is reflected back in an error message, which might allow cross-site
scripting (XSS) style attacks.
For the stable distribution (sarge) these problems have been fixed in
version 1.3.33-6sarge3.
For the unstable distribution (sid) these problems have been fixed in
version 1.3.34-3.
We recommend that you upgrade your apache package.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache | eq | 1.3.33-6sarge1 | |
| apache | eq | 1.3.33-6sarge2 | |
| apache | eq | 1.3.33-6 |
References
Related
openvas
openvas
Debian: Security Advisory (DSA-1167-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1167-1 (apache)
2008-01-17 00:00:00
Slackware Advisory SSA:2006-129-01 Apache httpd
2012-09-11 00:00:00
debian
debian
[SECURITY] [DSA 1167-1] New apache packages fix several vulnerabilities
2006-09-04 15:08:06
nessus
nessus
Debian DSA-1167-1 : apache - missing input sanitising
2006-10-14 00:00:00
Apache mod_imap Image Map Referer XSS
2008-03-25 00:00:00
SuSE9 Security Update : Apache (YOU Patch Number 11489)
2009-09-24 00:00:00
centos
centos
apache security update
2006-01-30 00:50:54
httpd, mod_ssl security update
2006-08-24 16:29:11
apache security update
2006-08-08 23:33:33
cve
cve
securityvulns
securityvulns
[OpenPKG-SA-2005.029] OpenPKG Security Advisory (apache)
2005-12-16 00:00:00
About the security content of Security Update 2008-003 / Mac OS X 10.5.3
2008-05-30 00:00:00
httpd
httpd
Apache Httpd < 2.2.2 : mod_imap Referer Cross-Site Scripting
2005-11-01 00:00:00
Apache Httpd < 1.3.35 : mod_imap Referer Cross-Site Scripting
2005-11-01 00:00:00
Apache Httpd < 2.0.58 : mod_imap Referer Cross-Site Scripting
2005-11-01 00:00:00
slackware
slackware
[slackware-security] Apache httpd
2006-05-09 22:19:21
ubuntucve
ubuntucve
jvn
jvn
JVN#06045169 mod_imap cross-site scripting vulnerability
2005-12-15 00:00:00
debiancve
debiancve
redhat
redhat
(RHSA-2006:0158) apache security update
2006-01-17 00:00:00
(RHSA-2006:0619) httpd security update
2006-08-10 00:00:00
(RHSA-2006:0618) apache security update
2006-08-08 00:00:00
freebsd
freebsd
apache -- mod_imap cross-site scripting flaw
2005-11-01 00:00:00
f5
f5
K6669 : Apache HTTP Expect header handling
2013-03-19 00:00:00
SOL6669 - Apache HTTP Expect header handling
2007-05-16 00:00:00
oraclelinux
oraclelinux
Moderate httpd security update
2006-11-30 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server Header Injection Cross-Site Scripting (CVE-2006-3918)
2014-03-17 00:00:00
packetstorm
packetstorm
ProCheckUp Security Advisory 2007.37
2007-12-02 00:00:00
Oracle HTTP Server Header Cross Site Scripting
2011-06-14 00:00:00
suse
suse
remote denial of service in apache,apache2
2006-07-28 14:21:14
cryptographic problems in apache2
2006-09-08 14:34:17
cross site scripting in apache2,apache
2008-04-04 16:29:16
ubuntu
ubuntu
Apache vulnerabilities
2006-01-13 00:00:00
Apache vulnerabilities
2008-02-04 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2006-02-06 00:00:00
exploitpack
exploitpack
Oracle HTTP Server - Cross-Site Scripting Header Injection
2011-06-13 00:00:00
prion
prion
Cross site scripting
2007-12-03 22:46:00
Cross site scripting
2007-11-14 01:46:00
seebug
seebug
Oracle HTTP Server - XSS Header Injection
2014-07-01 00:00:00
exploitdb
exploitdb
Oracle HTTP Server - Cross-Site Scripting Header Injection
2011-06-13 00:00:00
cert
cert
Apache mod_rewrite contains off-by-one error in ldap scheme handling
2006-07-28 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
Related for OSV:DSA-1167-1