4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.016 Low
EPSS
Percentile
87.3%
Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache
httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows
remote attackers to inject arbitrary web script or HTML via the Referer
when using image maps.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 6.06 | noarch | apache | < 1.3.34-2ubuntu0.1 | UNKNOWN |
ubuntu | 6.10 | noarch | apache | < 1.3.34-4ubuntu1 | UNKNOWN |
ubuntu | 7.04 | noarch | apache | < 1.3.34-4ubuntu1 | UNKNOWN |
ubuntu | 6.06 | noarch | apache2 | < 2.0.55-4ubuntu2.2 | UNKNOWN |
ubuntu | 6.10 | noarch | apache2 | < 2.0.55-4ubuntu4.1 | UNKNOWN |
ubuntu | 7.04 | noarch | apache2 | < 2.2.3-3.2ubuntu0.1 | UNKNOWN |