CVE-2008-2939

2008-08-0600:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.054 Low

EPSS

Percentile

93.0%

JSON

Cross-site scripting (XSS) vulnerability in proxy_ftp.c in the
mod_proxy_ftp module in Apache 2.0.63 and earlier, and mod_proxy_ftp.c in
the mod_proxy_ftp module in Apache 2.2.9 and earlier 2.2 versions, allows
remote attackers to inject arbitrary web script or HTML via a wildcard in
the last directory component in the pathname in an FTP URI.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchapache2< 2.0.55-4ubuntu2.4UNKNOWN
ubuntu7.10noarchapache2< 2.2.4-3ubuntu0.2UNKNOWN
ubuntu8.04noarchapache2< 2.2.8-1ubuntu0.4UNKNOWN