CVE-2008-0005 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2008-0005
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0005

Description: mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39615 UBUNTU http://www.ubuntu.com/usn/usn-575-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html ST 1019185 SREASONRES http://securityreason.com/achievement_securityalert/49 SREASON http://securityreason.com/securityalert/3526 SAID Secunia Advisory: SA35650 Secunia Advisory: SA28467 Secunia Advisory: SA28471 Secunia Advisory: SA28526 Secunia Advisory: SA28607 Secunia Advisory: SA28749 Secunia Advisory: SA28977 Secunia Advisory: SA29348 Secunia Advisory: SA29420 Secunia Advisory: SA29640 Secunia Advisory: SA30732 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0009.html http://www.redhat.com/support/errata/RHSA-2008-0008.html http://www.redhat.com/support/errata/RHSA-2008-0007.html http://www.redhat.com/support/errata/RHSA-2008-0006.html http://www.redhat.com/support/errata/RHSA-2008-0005.html http://www.redhat.com/support/errata/RHSA-2008-0004.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10812 MLIST http://lists.vmware.com/pipermail/security-announce/2009/000062.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:016 http://www.mandriva.com/security/advisories?name=MDVSA-2008:015 http://www.mandriva.com/security/advisories?name=MDVSA-2008:014 HP http://marc.info/?l=bugtraq&m=130497311408250&w=2 http://marc.info/?l=bugtraq&m=125631037611762&w=2 http://marc.info/?l=bugtraq&m=124654546101607&w=2 GENTOO http://security.gentoo.org/glsa/glsa-200803-19.xml FEDORA CONFIRM http://docs.info.apple.com/article.html?artnum=307562 http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/505990/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/486167/100/0/threaded BID 27234 APPLE http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability