CVE-2006-5752 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5752
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5752

Description: Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enabled and a public server-status page is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving charsets with browsers that perform "charset detection" when the content-type is not specified.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35097 UBUNTU http://www.ubuntu.com/usn/usn-499-1 TRUSTIX http://www.trustix.org/errata/2007/0026/ SUSE http://www.novell.com/linux/security/advisories/2007_61_apache2.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-66-200032-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-103179-1 ST 1018302 SAID Secunia Advisory: SA28224 Secunia Advisory: SA28212 Secunia Advisory: SA27732 Secunia Advisory: SA27563 Secunia Advisory: SA27037 Secunia Advisory: SA26993 Secunia Advisory: SA26842 Secunia Advisory: SA26458 Secunia Advisory: SA26508 Secunia Advisory: SA26822 Secunia Advisory: SA26273 Secunia Advisory: SA26443 Secunia Advisory: SA28606 Secunia Advisory: SA25827 Secunia Advisory: SA25830 Secunia Advisory: SA25873 Secunia Advisory: SA25920 REDHAT http://rhn.redhat.com/errata/RHSA-2007-0556.html http://www.redhat.com/support/errata/RHSA-2007-0532.html http://www.redhat.com/support/errata/RHSA-2008-0261.html http://www.redhat.com/support/errata/RHSA-2007-0557.html http://rhn.redhat.com/errata/RHSA-2007-0534.html MLIST http://lists.vmware.com/pipermail/security-announce/2009/000062.html MISC http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245112 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:142 http://www.mandriva.com/security/advisories?name=MDKSA-2007:141 http://www.mandriva.com/security/advisories?name=MDKSA-2007:140 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795 GENTOO http://security.gentoo.org/glsa/glsa-200711-06.xml FEDORA http://www.redhat.com/archives/fedora-package-announce/2007-September/msg00320.html CONFIRM http://www.fujitsu.com/global/support/software/security/products-f/interstage-200802e.html http://bugs.gentoo.org/show_bug.cgi?id=186219 http://support.avaya.com/elmodocs2/security/ASA-2007-353.htm http://httpd.apache.org/security/vulnerabilities_13.html http://httpd.apache.org/security/vulnerabilities_22.html http://httpd.apache.org/security/vulnerabilities_20.html http://svn.apache.org/viewvc?view=rev&revision=549159 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/505990/100/0/threaded BID 24645 AIXAPAR http://www-1.ibm.com/support/search.wss?rs=0&q=PK49295&apar=only http://www-1.ibm.com/support/docview.wss?uid=swg1PK52702

Return to the previous page.