CVE-2006-3918

2006-07-2700:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.971 High

EPSS

Percentile

99.8%

JSON

http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before
6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58,
and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP
request when it is reflected back in an error message, which might allow
cross-site scripting (XSS) style attacks using web client components that
can send arbitrary headers in requests, as demonstrated using a Flash SWF
file.

Bugs

Notes

Author	Note
jdstrand	verify edgy is fixed

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchapache< 1.3.34-4ubuntu1UNKNOWN
ubuntu7.04noarchapache< 1.3.34-4ubuntu1UNKNOWN
ubuntu6.06noarchapache2< 2.0.55-4ubuntu2.3UNKNOWN
ubuntu6.10noarchapache2< 2.0.55-4ubuntu4.1UNKNOWN
ubuntu7.04noarchapache2< 2.2.3-3.2ubuntu0.1UNKNOWN
ubuntu7.10noarchapache2< 2.2.4-3UNKNOWN
ubuntu8.04noarchapache2< 2.2.4-3UNKNOWN
ubuntu8.10noarchapache2< 2.2.4-3UNKNOWN
ubuntu9.04noarchapache2< 2.2.4-3UNKNOWN
ubuntu9.10noarchapache2< 2.2.4-3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	apache	< 1.3.34-4ubuntu1	UNKNOWN
ubuntu	7.04	noarch	apache	< 1.3.34-4ubuntu1	UNKNOWN
ubuntu	6.06	noarch	apache2	< 2.0.55-4ubuntu2.3	UNKNOWN
ubuntu	6.10	noarch	apache2	< 2.0.55-4ubuntu4.1	UNKNOWN
ubuntu	7.04	noarch	apache2	< 2.2.3-3.2ubuntu0.1	UNKNOWN
ubuntu	7.10	noarch	apache2	< 2.2.4-3	UNKNOWN
ubuntu	8.04	noarch	apache2	< 2.2.4-3	UNKNOWN
ubuntu	8.10	noarch	apache2	< 2.2.4-3	UNKNOWN
ubuntu	9.04	noarch	apache2	< 2.2.4-3	UNKNOWN
ubuntu	9.10	noarch	apache2	< 2.2.4-3	UNKNOWN