IBM HTTP Server "Expect" header cross-site scripting - Advisories

IBM HTTP Server "Expect" header cross-site scripting

Secunia Advisory:	SA21174
Udsendt:	2006-07-25
Sidste Opdt.:	2007-11-13

Kritisk:	Mindre kritisk
Betydning:	Cross Site Scripting
Hvor:	Fra Internet
Løsning Status:	Producent Patch

Software:	IBM HTTP Server 1.x IBM HTTP Server 2.x IBM HTTP Server 6.0.x IBM HTTP Server 6.1.x

CVE reference:	CVE-2006-3918 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Beskrivelse: IBM har bekræftet en sårbarhed i IBM HTTP Server, som kan udnyttes af ondsindede personer til at udføre cross-site scriptingangreb. Yderligere information: SA21172 Løsning: Opdatér til en rettet version. Version 6.1: Opdatér til version 6.1.0.1 eller nyere. Version 6.0: Opdatér til version 6.0.2.13 eller nyere. Version 2.0: Installér APAR PK25355 eller nyere. Version 1.3: Installér APAR PK27875 eller nyere. Forløb: 11-08-2006: Tilføjede CVE-reference. 13-11-2007: Tilføjede version 1.x som sårbar. Original Advisory: IBM: http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631 Andre Kilder: SA21172: http://secunia.com/advisories/21172/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

17 Relaterede Secunia Advisories, displaying 10

Send Feedback to Secunia

Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com. Ideer, foreslag og andet feedback er også meget velkommen.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	OpenBSD BIND Query Port DNS Cache Poisoning

2.	Debian update for clamav

3.	Drupal Session Fixation Vulnerability

4.	Apple Safari Cross-Domain Cookie Injection Vulnerability

5.	Linux Kernel LDT Buffer Size Handling Vulnerability

6.	Debian update for xulrunner

7.	Microsoft Word Unspecified Code Execution Vulnerability

8.	Red Hat update for thunderbird

9.	IPCop update for perl

10.	dnsmasq Denial of Service and DNS Cache Poisoning