Secunia

icon customer login

Community Login

icon customer login

icon customer login

Secunia CSI 5.0

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2006-5752
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5752

Description: Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35097 UBUNTU http://www.ubuntu.com/usn/usn-499-1 TRUSTIX http://www.trustix.org/errata/2007/0026/ SUSE http://www.novell.com/linux/security/advisories/2007_61_apache2.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-103179-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-200032-1 ST 1018302 SAID Secunia Advisory: SA28224 Secunia Advisory: SA28212 Secunia Advisory: SA27732 Secunia Advisory: SA27563 Secunia Advisory: SA27037 Secunia Advisory: SA26993 Secunia Advisory: SA26842 Secunia Advisory: SA26822 Secunia Advisory: SA26508 Secunia Advisory: SA26458 Secunia Advisory: SA26443 Secunia Advisory: SA26273 Secunia Advisory: SA25920 Secunia Advisory: SA25873 Secunia Advisory: SA25827 Secunia Advisory: SA25830 Secunia Advisory: SA28606 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0557.html http://rhn.redhat.com/errata/RHSA-2007-0534.html http://rhn.redhat.com/errata/RHSA-2007-0556.html http://www.redhat.com/support/errata/RHSA-2007-0532.html http://www.redhat.com/support/errata/RHSA-2008-0261.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10154 MLIST http://lists.vmware.com/pipermail/security-announce/2009/000062.html MISC http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245112 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:142 http://www.mandriva.com/security/advisories?name=MDKSA-2007:141 http://www.mandriva.com/security/advisories?name=MDKSA-2007:140 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 GENTOO http://security.gentoo.org/glsa/glsa-200711-06.xml FEDORA http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=186219 http://httpd.apache.org/security/vulnerabilities_22.html http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html http://support.avaya.com/elmodocs2/security/ASA-2007-353.htm http://httpd.apache.org/security/vulnerabilities_20.html http://httpd.apache.org/security/vulnerabilities_13.html http://svn.apache.org/viewvc?view=rev&revision=549159 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/505990/100/0/threaded BID 24645 AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg1PK52702 http://www-1.ibm.com/support/search.wss?rs=0&q=PK49295&apar=only

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports & Papers
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2012 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability