CVE-2008-0005

2008-01-1100:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.015 Low

EPSS

Percentile

86.8%

JSON

mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev,
and 1.3.x before 1.3.40-dev does not define a charset, which allows remote
attackers to conduct cross-site scripting (XSS) attacks using UTF-7
encoding.

Notes

Author	Note
jdstrand	redhat has patch for all releases

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchapache2< 2.0.55-4ubuntu2.3UNKNOWN
ubuntu6.10noarchapache2< 2.0.55-4ubuntu4.2UNKNOWN
ubuntu7.04noarchapache2< 2.2.3-3.2ubuntu2.1UNKNOWN
ubuntu7.10noarchapache2< 2.2.4-3ubuntu0.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	apache2	< 2.0.55-4ubuntu2.3	UNKNOWN
ubuntu	6.10	noarch	apache2	< 2.0.55-4ubuntu4.2	UNKNOWN
ubuntu	7.04	noarch	apache2	< 2.2.3-3.2ubuntu2.1	UNKNOWN
ubuntu	7.10	noarch	apache2	< 2.2.4-3ubuntu0.1	UNKNOWN