CVE-2008-0005 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2008-0005
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-0005

Description: mod_proxy_ftp in Apache 2.2.x before 2.2.7-dev, 2.0.x before 2.0.62-dev, and 1.3.x before 1.3.40-dev does not define a charset, which allows remote attackers to conduct cross-site scripting (XSS) attacks using UTF-7 encoding.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39615 UBUNTU http://www.ubuntu.com/usn/usn-575-1 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html ST 1019185 SREASONRES http://securityreason.com/achievement_securityalert/49 SREASON http://securityreason.com/securityalert/3526 SAID Secunia Advisory: SA30732 Secunia Advisory: SA29640 Secunia Advisory: SA29420 Secunia Advisory: SA29348 Secunia Advisory: SA28977 Secunia Advisory: SA28749 Secunia Advisory: SA28607 Secunia Advisory: SA28467 Secunia Advisory: SA28471 Secunia Advisory: SA28526 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0007.html http://www.redhat.com/support/errata/RHSA-2008-0009.html http://www.redhat.com/support/errata/RHSA-2008-0008.html http://www.redhat.com/support/errata/RHSA-2008-0004.html http://www.redhat.com/support/errata/RHSA-2008-0006.html http://www.redhat.com/support/errata/RHSA-2008-0005.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:015 http://www.mandriva.com/security/advisories?name=MDVSA-2008:016 http://www.mandriva.com/security/advisories?name=MDVSA-2008:014 GENTOO http://security.gentoo.org/glsa/glsa-200803-19.xml FEDORA CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm http://docs.info.apple.com/article.html?artnum=307562 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/486167/100/0/threaded BID 27234 APPLE http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Return to the previous page.